W32.Matcher.Worm - Removal

To remove this worm, delete all detected files, remove the entry that it made to the registry \Run key, and delete the entry that it made to the \Autoexec.bat file.

To remove this worm:

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and then run a full system scan, making sure that NAV is set to scan all files.
3. Delete any files detected as W32.Matcher

To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.

1. Click Start, and then click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following subkey:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\Run
   
   
4. In the right pane, delete the following value:
   
   (Default)    <\Windows\System folder> \Matcher.exe
   
5. Click Registry and then click Exit to save the changes.

To edit the Autoexec.bat file:

1. Click Start and then click Run.
2. Type the following and then press Enter:
   
   edit c:\autoexec.bat
   
3. Locate the following lines and delete them:
   
   @echo off
   echo from: Bugger
   pause
   
4. Click File and then click Save.
5. Click File and then click Exit.

Technical Details