Re: explorer.exe / trojan.rootserver

From: Daniel Billingsley (dbillingsley@NO.durcon.SPAAMM.com)
Date: 02/20/03 

From: "Daniel Billingsley" <dbillingsley@NO.durcon.SPAAMM.com>
Date: Thu, 20 Feb 2003 12:37:41 -0500

Umm... explorer.exe is a standard windows program, ya know, as in Windows
Explorer. Are you saying that has been infected or there's another
explorer.exe somewhere?

If the standard explorer.exe is infected and the antivirus can't CLEAN it, I
think you pretty much have to apply the scorched earth technique.

"Dan" <drasmu178@aol.com> wrote in message
news:06f301c2d8fb$2b2cc360$a601280a@phx.gbl...
> My anti virus software has detected a trojan horse called
> explorer.exe I have located the mal ware and would like
> to delete the file and all registry entries. The program
> when executed by users replicates any files that they try
> to delete by making copies of copies of copies. Has any
> body found a fix or a way to delete this intruder.
>
> Thanks Dan