[Merged] False Positive...explorer.exe?, Worm.Win32.Huhk.c Options

[helpmeplz]

Don't delete anything, the alert is a false alarm. Read back through this thread to find out how to fix it.

thanks for the quick reply. I jusy wasnt sure, because it seems like everyone else here has explorer.exe infected..

[Cannibal Corpse]

Hey All,

I had to restore it to an alternate location (I chose My Documents). Hopefully I am OK?

Thanks.

[Cnon]

Hey All,

I just deleted two worms:

deleted: virus Worm.Win32.Huhk.c File: C:\WINDOWS\explorer.exe
deleted: virus Worm.Win32.Huhk.c Running module: explorer.exe\Explorer.EXE

Am I safe now and how did I get infected?

I had downloaded a ewigo trojan scanner prior to the problem; maybe that was it? I had to do a win xp system restore to get back in business and have deleted all but the current one.

Cnon

This post has been edited by Cnon: 20.12.2007 08:09

[Whizard]

Its not infected, it was a mislabeled by VirusAnalysts

[sammyiii]

1. Check if explorer.exe is present in c:\windows

2. The update will stop the file being detected in future, you should restore those "deleted" files from the backup tab of the kaspersky interface

3. It will update as per automatic schedule, but you can peform a manual update now.

When I turned my computer back on, it updated automatically and no more warnings popped up. And I looked in the Task Manager and saw that explorer.exe is there, so I guess it wasn't deleted. I haven't tried any scanning yet, or rebooting.

Question: Regarding the instruction to "restore those deleted files from the backup tab": what happens if I don't do that...seems like my computer is working now and I am reluctant to mess with it further. What exactly am I restoring, since explorer.exe seems to be not deleted after all.

(Good news: I had called my folks and they hadn't had the problem yet so I had them turn off their computer until I heard that the fix was in. They got the update when they turned it back on and, yay, no problems. It would have totally freaked them out and they are fragile healthwise. Whew!)

Thanks,
k

This post has been edited by sammyiii: 20.12.2007 08:51

[Cnon]

hey guys

i got the same message, but on c:\windows\explorer.exe
my main computer sais nothing, but here on the laptop kaspersky alterts !

Hi there,

My computer wouldn't boot so I did a win xp system restore and it came up.

See my post here: http://forum.kaspersky.com/index.php?showtopic=55711


ETA: I was able to delete the worm and have now scanned the critical areas of my system and I'm clear.

Cnon

This post has been edited by Cnon: 20.12.2007 08:53

[sameu]

Kaspersky recently detected Worm.Win32.huhk.c on my computer, and the worm has already infected explorer.exe...

It deinfected it, and I ran the scan again... and now it doesnt detect any worm/virus.

But the worm is still there (explorer.exe is still probably infected or there is another copy of the worm in the computer?) because Windows DEP popped up warnning me its protecting some exe from being changed by a virus or worm... and then the DrWatson program ran.

How do I get rid of it?

Is explorer.exe.tmp (16mb) an infected file too?

[Sjoeii]

Why are you so sure that it is still there?

[sameu]

Why are you so sure that it is still there?

Cause something popped up from windows (Data Execution Prevention - DEP) saids it stopped a .exe from being modified (and warnned that its likely a virus), never had this popped up or happned before.

[Feejo]

Make a update and rescan. See here http://forum.kaspersky.com/index.php?showtopic=55669

[sameu]

Make a update and rescan. See here http://forum.kaspersky.com/index.php?showtopic=55669

Thank you!

[Cnon]

Hi there,

My computer wouldn't boot so I did a win xp system restore and it came up.

See my post here: http://forum.kaspersky.com/index.php?showtopic=55711
ETA: I was able to delete the worm and have now scanned the critical areas of my system and I'm clear.

Cnon

Do I need to restore both of the explorers in the backup tab or just one of them?

Do I still need to restore if I system restored to an time before this problem occurred?

This post has been edited by Cnon: 20.12.2007 09:34

[PWR]

I am having a problem with the same worm. Kaspersky deleted my c:\windows\explorer.exe file My computer is not running correctly now - windows does not fully load. Any suggestions?

[PWR]

I have the same virus and my explorer.exe was deleted.

How do I restore it? Needless to say, my computer isn't running well without explorer.exe!

[Kilauea]

Take a look here:
http://forum.kaspersky.com/index.php?s=&am...st&p=503530
german

and gere
http://forum.kaspersky.com/index.php?showt...st&p=503423
english


Kilauea

This post has been edited by Kilauea: 20.12.2007 10:52

[Cnon]

Do I need to restore both of the explorers in the backup tab or just one of them?

Do I still need to restore if I system restored to an time before this problem occurred?

Update: I just restarted and all is

Cnon

[Kilauea]

Look here:

http://forum.kaspersky.com/index.php?s=&am...st&p=503802


Kilauea

[win32]

Have tried to send you an e-mail with explorer.exe attatched. Hope it gets through ok. Sent it to add as above.

Swampy

Can I get a copy of explorer.exe too? Do I just need to save into C to solve the problem?

[Kilauea]

Please take a look at my posting #117

Your question: You need to install into C:\windows



Kilauea

[win32]

Please take a look at my posting #117

Your question: You need to install into C:\windows
Kilauea

Thanks, I read the thread. The problem is that files are no more listed in the backup log as I have deleted last night thinking they were viruses...do I just need to put explorer.exe back in or reset my PC?? Thanks