A new campaign by the Waledec botnet is targeting users with love and Valentine's Day-themed spam messages.
Marshal8e6 TRACE Labs says the spam consists of a short message and a link to a web page consisting of a line of text and an image with a selection of hearts.
The image on the page is linked to an executable file with varying names, such as meandyou.exe and youandme.exe, which when run installs the Waledec bot.
"These files are very poorly detected by anti-virus programs. Shortly after downloading, the bot is instructed to download the rogue anti-virus program MS AntiSpyware 2009, which gives false infection results," said Marshal8e6 TRACE Labs.
Several minutes after infection, the Waledec bot begins to send spam.