Valenavir.A disguises itself as a Valentine's eCard notification. When you click on the link in the notification email, it will redirect you to a page that attempts to persuade users into installing additional malware.
Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.
Find the latest advice in our Community Knowledge Base.
See the manual for your F-Secure product on the Help Center.
Submit a file or URL for further analysis.
Trojan-Downloader:W32/Valenavir.A disguises itself as a Saint Valentine's Day eCard notification.The eCard notification arrives in spammed email. When you click on the link in the email, it will redirect you to a page that asks you to install a fraudulent Adobe Flash Player. The software is supposedly required in order to view the eCard. This fraudulent application is actually a Trojan-Spy that downloads and installs a Trojan-Spy:W32/BZub variant onto the system.Once installed, Valenavir.A connects to:
Which redirects to:
The attempted download is detected as Trojan-Spy:W32/Bzub.HZ.