From:
Gordon Scott
e-mail: [log in to unmask]
When I search for explore.exe in either upper or lower case the search
responds with } |EXPLORE.EXE although the vertical slash is physically
closer to the capital E than in my example. Is this the worm you identify
below or is it a valid file which belongs. I do not appear to have lost any
files.
Thanks for any information you can give me.
-----Original Message-----
From: PCSOFT - Personal Computer software discussion list
[mailto:[log in to unmask]]On Behalf Of Ian
Sent: 18-Jan-04 14:31
To: [log in to unmask]
Subject: [PCSOFT] Worm Explore.exe
Some of you might like to see if your computer is playing host to a
worm-created file named Explore.exe. (That's EXPLORE, not EXPLORER)
This is a bug which, apart from sending itself out in the form of replies to
unread messages, can destroy certain files, including .docs, .xls and .ppt.
Check out the blurb here:
http://www.symantec.com/avcenter/venc/data/worm.explore.zip.html
......and there's a fix here:
http://securityresponse.symantec.com/avcenter/FixExzip.exe
It just got onto my PC in spite of my fairly comprehensive defense
mechanisms. I wouldn't have known it was there if Zone Alarm Pro hadn't
jumped up and asked if it was ok for explore.exe to access the network.
If you run the fix and you're using XP, turn off System Restore first, as
per the Symantec instructions. And you might consider running it in safe
mode - I couldn't get it to finish in regular mode - I think the bug itself
was somehow affecting the process.
Ian Porter
Computer Guys Inc.
Arrowtown
New Zealand
[log in to unmask]
The NOSPIN Group
http://freepctech.com
"Hold No Punches.." Rode brings you great shareware/freeware
programs with his honest opinions in this weekly column.
http://freepctech.com/rode
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.560 / Virus Database: 352 - Release Date: 08/01/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.562 / Virus Database: 354 - Release Date: 16/01/2004
PCSOFT maintains many useful files for download
visit our download web page at:
http://freepctech.com/downloads.shtml
|
