Fix found for Melissa mutants

Major antivirus vendors have posted fixes for a new strain of the Melissa virus, plus patches for two other variants of the e-mail sending virus, found last week.

Melissa.U(Gen1) is the new culprit, which according to Symantec is a variant of the Melissa.U strain reported last week in addition to Melissa.V. According to Symantec representatives, "A couple" of major corporations have been hit by this virus, including one that experienced 30,000 infections.

Fixes to both the U and V versions of Melissa are posted on the sites of major antivirus vendors.

Computer users shouldn't mistake the new Melissa.U(Genl) for the original, or for the original variant, warns Darren Kessner, a senior virus researcher at Symantec.

"People need to get the latest update, even if they already have the fix for the U and V variants," Kessner emphasises. The fixes for those variants will not protect against the new modified variant, he says.

Identical payload

Melissa.U(Gen1) works much the same way as Melissa.U. The virus arrives in an e-mail with the subject line "pictures" followed by the user name registered in the local copy of Word. The body of the message will contain the phrase "what's up?"

Once received, the virus works by using Microsoft Outlook to e-mail a copy of the infected document to the first four e-mail addresses in the Outlook address book (these can include distribution lists). The virus also deletes several system files, all of which are necessary to boot up the machine, leaving the machine unbootable.

In addition, the virus infects Word's global template, thereby infecting all future Word documents. According to a description of the virus posted on Symantec's Web site, the following text will appear in infected documents: ">>>>>Please Check Outlook Inbox Mail<<<<

Symantec's latest update will catch all of the variants, according to Kessner.

McAfee.com has not posted a specific fix for this newest variant, and has no plans to do so, according to Eddy Hsia, director of development.

"We currently do detect the Gen1 variant of the Melissa.U virus" in the fix that McAfee posted for Melissa.U and Melissa.V last week, Hsia says.

McAfee representatives downplay Symantec officials' emphasis on the need for a new fix for new variants. Both companies emphasise the need to keep your virus detection data files current, however.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Liane Gouthro

PC World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?