Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It modifies files, changes the browser home page, sends SMS messages to random numbers, and displays MS-DOS windows. |
|Detection updated on:||Nov. 13, 2002|
Valentin.A is a worm that spreads rapidly using the following means of transmission:
- E-mail messages with a blank subject that include HTML code in the AutoSignature.
It is very easy to get infected with the virus through this message (if Outlook Express 5 is installed). In fact, it carries out its infection the message carrying the worm is opened or viewed through Outlook’s Preview pane. In addition, it sends itself out to all the contacts in the Address Book.
- Automatically sending itself through IRC chat.
Valentin.A has a large number of effects, some of which are destructive: it modifies files, changes the home page of the browser , sends messages to mobile phones chosen at random, displays MS-DOS windows on screen, etc.
An indication that the message carrying Valentin.A has reached a computer is an e-mail message with a blank subject (the rest of the characteristics are variable).
When it has carried out its infection, Valentin.A displays an MS-DOS window.
Furthermore, Valentin.A changes the Internet browser home page to: http://www.terra.es/personal/acaymo.
Once Valentin.A has sent itself out to the contacts in the Address Book and once it has sent certain SMS messages to mobile phones, it displays the following MS-DOS window: