Home / malwarePDF  

Trojan-Downloader:W32/Valenavir.A


First posted on 01 March 2007.
Source: SecurityHome

Aliases :

Trojan-Downloader:W32/Valenavir.A is also known as Trojan-Downloader.Win32.Small.dge, Valenavir.A.

Explanation :

Valenavir.A disguises itself as a Valentine's eCard notification. When you click on the link in the notification e-mail, it will redirect you to a page that attempts to persuade users into installing additional malware.

cription

Trojan-Downloader:W32/Valenavir.A disguises itself as a Saint Valentine's Day eCard notification.

The eCard notification arrives in spammed e-mail. When you click on the link in the e-mail, it will redirect you to a page that asks you to install a fraudulent Adobe Flash Player. The software is supposedly required in order to view the eCard. This fraudulent application is actually a Trojan-Spy that downloads and installs a Trojan-Spy:W32/BZub variant onto the system.

Once installed, Valenavir.A connects to:

Which redirects to:


The attempted download is detected as Trojan-Spy:W32/Bzub.HZ.

Last update 01 March 2007

 

TOP

Malware :

Family: