THE EXPLORE WORM

The Explore Worm damages files by changing them to 0 bytes. The Worm spreads via email attachments, similar to the previous Melissa virus.

If you get an email message with an attachment named "zipped_files.exe" or "zipped_docs.exe" - Do not run this program. Press the Shift and Delete keys at the same time to permanently remove this message. Once the worm is activated you can infect others via email. The message will arrive with an attachment with the filename "zipped_files.exe" or "zipped_docs.exe". This file may be sent to you from a known email correspondent. The body of the e-mail message may contain the following text:

Hi Recipient Name! I received your email and I shall send you a reply ASAP. Till then, take a look at the attached zipped docs. bye

The file will copy itself to the c:\windows\system directory with the filename "Explore.exe" and then modifies WIN.INI so that the program is executed each time Windows is started. The virus utilizes your Outlook e-mail to send the infected file as replies to any received messages in your inbox. Your name will appear as the sender.

HOW TO GET RID OF IT
For Windows 95 or 98

1. Exit to DOS
2. Delete the file c:\windows\system\explore.exe
3. Edit the file WIN.INI by typing "edit win.ini"
4. Remove the line: "run=c"\windows\system\explore.exe

For Windows NT

1. Remove the file c:\winnt\system32\explore.exe
2. Run REGEDIT (not REGEDIT32)
3. Locate the hive (hkey_current_user\software\microsoft\windowsnt\current version\windows)
4. Remove the following key: "run"="C:\\winnt\\system32\\explore.exe"

Return Home