W32.Matcher Symantec has received numerous reports of a new email worm which is affecting companies worldwide. Like AnnaKournikova and LoveLetter this is a worm, which uses Microsoft Outlook to propagate itself once the attachment is launched.
Eric Chien, head of Symantec's Antivirus Research Centre, commented: "This is social engineering on the same level as the LoveLetter virus. Fun programs which determine who might love you are always popular in the schoolground - and the office. Once more we urge companies and individuals to install the security update provided by Microsoft for their Outlook software - this virus could be stopped in its tracks. For infected companies using Outlook without the security update this is really bad news - an effective denial of service attack will be launched against their company network. IT and Security managers need to be warning their users not to open this email right now, to prevent infection. Stopping viruses is as much about a companies cultural security policy, as much as it is about virus definitions."
W32.Matcher <VBS.SST@MM>
Subject:
Matcher
Text:
Want to find your love mates!!! Try this its cool.....Looks and Attitude Maching to opposite sex.'
Attachment:
matcher.exe
When this virus is executed it also adds some lines to the AUTOEXEC.BAT so when rebooted you will see "from: Bugger".
Removal Instructions:
1. Delete all detected files.
2. Remove the registry key HKLM/Software/Microsoft/Windows/CurrentVersion/Run/{Default} =Windows System Directory/matcher.exe
3. Restore the C:\AUTOEXEC.BAT
Definition updates to protect against this virus are available at www.symantec.com . All Norton Antivirus users should run LiveUpdate to ensure immediate protection. Visit www.symantec.com for further details.
Share
