W32.Valcard


Aliases: W32/Admirer@MM
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Fast
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 14 Feb 2002
Damage: Low

Characteristics: The W32.Valcard application is an uncomplicated mass-mailing worm which can replicate itself to Windows in drive C. It deliver itself to every reciever in the address book of Microsoft Outlook. It also runs and creates a file. It also adds some value to registry key.

More details about W32.Valcard

The email this program sends has a message of “Good night, sweet prince, and flights of angels sing thee to thy rest” or “Febuary Feelings It's that time of year again.But I'm still only sedning a card to you.” or “Happy Valentineshope you like the card I've attached,even if you don't feel the same.” or “In this life we cannot do great things.We can only do small things with great love.” or “HiI feel like a child sending you this cardbut I just had to do it.” or “...and every breath I ever took,every tear I ever wept, Every star I wished uponSeemed nothing until now.”. The email has an attachment of .exe.

Once the W32.Valcard was executed, it replicates itself. This worm adds a value to the key of the registry. The worm transfers itself to all of the saved contacts in the address book of the Microsoft Outlook. The email sent has several of subjects such as "Romantic gesture", "Secret Admirer", "O, beauty, till now I never knew thee!", "Somebody Loves You", "Poetry is an echo, asking a shadow to dance", "Romance from Afar", "I can express no kinder sign of love, than this kind kiss", "Love at first sight", "Thy eternal summer shall not fade", "Thy eternal summer shall not fade", "Thy eternal summer shall not fade", "Be Mine ?!", "Happy Valentines", or "Yours Always".