ExploreZip


Name: ExploreZip
Aliases: Worm.ExploreZip, Zipped Files, W32/ExploreZip, W32/ExplorezipB,W32/ExploreZipC, ExploreZip.worm.pak, MiniZip, ZipExplore,MiniExploreZip
Ports:
Files: Explore.exe - 210,432 bytes Zipped_files.exe - 210,432 bytes _setup.exe - 210,432 bytes .zip - [120 kb] Dinheiro.exe - System!.exe - Error!.exe -
Created: April 1999
Requires:
Actions: Worm / Destructive trojan / Mail trojan / Network trojan
Alters Win.ini. Destroys files ending with .h, .c, .cpp, .asm,.doc, .ppt, or .xls. ExplorezipB is a compressed version of this worm.Can propagate through networks with shared disks.
Versions: A, B, C, D, E,
Registers: HKEY_CURRENT_USER\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Windows\Run\
Notes: Works on Windows 95, 98 and NT, with MS Outlook, MSOutlook Expressor MS Exchange (MAPI-capable mail programs).
Country: written in Israel (???)
Program: Written in Delphi.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>