The another way to restore deleted explorer.exe in Windows XP is to restore it from the installation CD Windows XP. Boot from inst. CD and press R 'Repair'. In command line enter 'expand (CD DRIVE*):\i386\explorer.ex_ c:\windows' This expands the original compressed file explorer.ex_ to system folder . Then enter 'exit' and press Enter. PC reboots and starts the system.

* CD DRIVE is letter of the drive with the installation of Windows XP.

*** If you don't know what letter is your CD drive, enter in command line 'dir D:' then 'dir E:'.... etc. If you get list of files and folders from installation CD W XP, it is the right drive...

That can work too, but it will restore the original, unpatched explorer.exe that is not up to date. I am not sure what effect that would have on a system.

Will work for xp too.

Hi All,
Newbie to Kaspersky

My PC has been throwing wobblies (IE keeps trying to connect or work offline)
Had AVG, SpyBot and ZoneAlarm installed.

Have uninstalled all the above to try to use Kaspersky to try and find the culprit as files kept getting moved to Virus Vault (infected with Lop virus???)

Couldn't see how to remove but spoke to a colleague who said to try Kaspersky.

Well on installation & download of updates tonight I am getting the;

Virus
Worm.Win32.Huhk.c

Luckily checked this forum so haven't deleted the explorer.exe (however still waiting for it to find Lop Virus)

Anyone seen Lop virus and know the cure?

o man this was really scared me to!. i had all my friends callin me and i didnt know what to say!! . but now i see its fixed in the update . GJ KASPERSKY extremely fast response time KEEP IT UP

Hi guys, please try to update now, the fix should have been pushed out through the updater.

Clear your "detected" tab entries, and it shouldn't bug you about those files again.

I'm having the exact same problem. Stuck in a loop of booting and detecting the virus / false positive in explorer.exe will skipping do any harm deleting just perpetuates the problem. Have we dgot this problem from a kaspersky update?

What is a "false positive"?

The problem should be fixed if you update Kaspersky now.


Do not delete explorer.exe

I'm updating... Should the problem be over if the update is over ?

updated and scanned... no worm virus32 huhk.c but still my taskbar is gone
But i think it should be over if i restart the computer

Sorry for the tech-speak.

False positive = A file that is mistakenly flagged as "infected"

If you can open the Kaspersky interface, restore the explorer.exe file from the backup tab. If you have already done so, reboot and you should be back to normal.

i use my window XP cd to repair my windows to restore my explorer. and now you are telling me it a false positive?
zzzzz
can i restore my old explorer even after my used windows XP cd to repair my windows?

I restarted my pc... no more stupid huhk.c
I didn't restore the backup, I just rebooted my pc, no probs
Anyway thankyou!

Things like this are not supposed to happen, but on rare occasions they do.

Please accept my apologies for the inconvenience this has caused.


If you perform an update now, the fixed detections will be applied.

Hey no problem^^
You guys here are doing all what you can do to help us...
A lot better than my previous scanner

(sorry about the preious blank post.. new to this...screwed up)

Anyway, what I wanted to ask is:
1. How do I know if I already deleted Explorer.exe or not. I did what Kaspersky software told me to and asked it to delete the threat (4 times!)...don't know if that means I have deleted explorer.exe. It told me each time that both it had deleted the threat and that it couldn't delete it.

2. If I have, will getting my KAV update fix that? I am kinda afraid to turn on the "infected" computer again...wondering what I've destroyed by following KAV instructions.

Plus, I have to worry about my elderly parents' computer in another city...I bought them KAV too!

3. To update...will it automatically update as usual or do I need to ask it to do it this time.

I like this forum...I do get a bit confused about all the different sets of instructions for seemingly the same problem.

Thanks

Same problems here.

Still trying to get things working after 2 hours.

This "false positive" has done more damage to my PC than any virus has in the 20 years i've been using computers.

1. Check if explorer.exe is present in c:\windows

2. The update will stop the file being detected in future, you should restore those "deleted" files from the backup tab of the kaspersky interface

3. It will update as per automatic schedule, but you can peform a manual update now.

Thank you MAPKOBKA^^ for quick solution to this problem , and good night....

Hey MAPKOBKA^^

Thanks for all the info you have given in this thread, has helped me out a heap with this issue.

Just to let you know that I have the latest updates and when I scan an archive that has explorer.exe in it, Kaspersky 7 is still telling me it is infected with the Worm.Win32.Huhk.c

Not sure if this needs to be fixed in a following update or not, but would just like to let you know that this issue still needs to be addressed.

Cheers

My scanner doesn't detect it anymore

Greetings.

I had the same problem about 10 minutes ago so I thought I'd look it up and successfully found a thread about this issue.
Luckily I didn't delete Explorer.exe, that would have been a hassle.

I updated Kaspersky and it found a new update version so I guess this has been fixed.
The message doesn't appear anymore and it said it has been successfully disinfected.

I hope it's fixed for all of you!

Best regards,

Stoffer

Glad it has helped you guys


I am afraid that I will have to disappear for a while, although all questions will be answered by myself or my forum colleagues as soon as we can. Thanks for your understanding!

This caused me a little extra grief as it may with other people running XP with an Nvidia RAID. Simply starting from the Windows XP install doesn't work (at least very easily) since without the Sata and RAID drivers Install won't even see the raid. I did try the F6, install 3rd party drivers thingie but drive letters were all wacko. I then remember that windows DID boot even with the explorer.exe deleted. After booting hit Alt,Cnt/Del to get the task manager. Then within the task manager hit File/New task and type CMD. This brings up the command prompt window where you can get explorer from the windows installation disk. expand E: *explorer.ex_ C:\windows\explorer.exe. When I first did it I didn't put the extracted file name in full and although it expanded explorer.ex_ to windows directory, it didn't rename it. I had to CD C:\windows then RN explorer.ex_ C:\windows\explorer.exe.

All in all this was a bit of a freak out because doing a reinstall of windows has always been a pain with this damned RAID. I end up having to disconnect all over drives or Windows tries to put the NTLDR and other crap on a regular drive and I don't want that in case I want to change out the extra drives.

Ya Freaked Me Out...but it wasn't as bad as I thought it was. It would be good if you guys could someone let everyone know somehow that this IS a false positive to save a lot of freakin and workin. I called everyone I know that's running Kaspersky and told them to ignore any referance to Worm.Win32.Huhk.c.

Getting a spam email to that effect from you guys wouldn't bother me in the least :-)

All in All...great product

Where is the "detected items"tab?

Addendum to above...

don't know the relevance of this but it was also located here

deleted: virus Worm.Win32.Huhk.c File: C:\windows\system32\dllcache\OLD1A1.tmp

Also...I noticed on myspace today that someone that was asking to be a friend's profile had a strange thing

when I click on the "Pics" link the URL showing on the taskbar was not the usual viewmorepics yadda yadda but

http://okprofile.info

not sure if this is the source of this or not but...might wanna look into it

I have Defender Pro 5.0 and I got the error that my explorer.exe was infected with the Worm.Win32.Huhk.c virus. I did a google of the virus and it brought me here. I have tried doin the update but it just updates a master.xml but it doesn't solve the problem that my computer is still detecting it.

How do I fix it using Defender Pro 5 in 1???

Any information and replies will be greatly appreciated and thanks.

>> Where is the "detected items"tab?
Double Click on "K" >> Right Click Protection >> Report >> Detected

>>deleted: virus Worm.Win32.Huhk.c File: C:\windows\system32\dllcache\OLD1A1.tmp
Windows XP memory management stores a copy in case of most used programs to speed up load

>> http://okprofile.info
The site will not open nor reply to PING, so I guess its dead.

>>How do I fix it using Defender Pro 5 in 1???
I am sorry 5.xx products have reached end-of-life status. Unless vendors have an agreement with Kaspersky, there will be no more signatures. But you can manually force the update without any guarantees.

Flags, I have replied to you in #71 please be patient.

Hi at all,

als the scanner from germanys g-data is hit by this problem.
It uses the Kaspersky engine.

This is the second fp within 48 hours which is caused by Kaspersky.

Remember the gorshok a thing.

diskspool

Well doing a XP system repair allowed me to get the system going enough to copy my latest files to my USB backup. But for whatever reason has totally ruined my ability to connect to the internet. Microsoft doesn't seem to have their repair software actually working fully. I'm getting tons of DLL missing errors left and right when I try to use the net.

I'll be having to do a complete reinstall of everything over the next 2 days because of this false positive thing. I hope that steps are being taken at Kaspersky to make sure this kind of thing does not happen again. Virus software should not do things to a computer that are worse than the effects of the viruses that it attempts to stop.

If you run into this problem, keep in mind that system restore might not be your best option.

Before you reinstall pop-in a CD into the drive and do this:
Start >> Run >> sfc /scannow {OK}

Maybe I haven't had enough coffee this morning but I can't find anything right clickable when I open my Kaspersky interface.
I have 3 tabs across the top of my screen: Protection, Settings, Support.

On the left side of the Protection screen is a list of hyperlinks, the bottom one of which is 'view reports'. Clicking this simply brings up a list if tasks that Kaspersky has done.

It should have a detected tab in the same window.

On Defender Pro website it is still listing Kaspersky viruses and notifications. I have Defender Pro 2007 5 in 1 which doesn't expire til March. Am I unable to get a fix from Kaspersky or do I have to go thru Defender Pro itself to get a resolve to this issue??

What happens if I deleted explorer.exe by accident (instead of restoring the detected virus in kaspersky?)

I have run a scan and Worm.Win32.Huhk.c is not detected any more, but still I have blue screen and task bar is not loaded at start up...

Help!!!

>>You have to update the signatures. That is the only resolution. Maybe ask them why they dont sync with Kaspersky servers.

>>I have run a scan and Worm.Win32.Huhk.c is not detected any more, but still I have blue screen and task bar is not loaded at start up...
Manually restore it from CD in Recovery Console.

Worm.Win32.Huhk.c virus

Here is how you clear this shitty bug out. Hopefully the KAV updates will fix this bullshit.

1. Start Windows. When it “loads” do a CTRL + ALT + DEL to open task manager.
2. In task manager, click FILE , New Task (Run) , Go to ( C ): Kaspersky , AVP.exe and click OPEN.
3. Close task manager and go to the now open Kaspersky. (I had to do this twice before KAV opened)
4. In KAV, go to Service,Data Files,Backup,Files and restore the “explorer.exe” in C;/Windows/
5. Restart your PC


Voila! When I restored, it automatically put the file in the correct place, but keep your eyes open anyway.

Hope this helps somebody!

UPDATES SHOULD BE IN!!! CROSS YOUR FINGERS!!!

How do I update the signatures????

Hmmmm, is this the same person who made the previous extremely helpful posts or someone else?

Is there another way to view detected items? I've searched everything I can think of in the Kaspersky help file and can't find anything in there either.
Being as how I've updated Kaspersky several times already this morning and restarted my computer and I'm still getting this virus warning, obviously this detected items thing is something crucial.

Does anyone else not have a detected tab? I'm wondering why I don't have it if everyone else does.

The solution already had been posted before:
http://forum.kaspersky.com/index.php?showt...st&p=503423

>>Rhyssa, what is your exact product version? Seems to me you are having a v6:
1) Open the Main Window
2) Right Click on Protection
3) Press Reports
4) Backup tab should be seen on the far right

>>How do I update the signatures????
You will need to consult the settings of your program, as I was unable to locate the main website of your particular utility, which is a Kaspersky clone by the way.

I think I've found my problem. I'm running version 5 and there's now a version 7. Reading up on how to update now.

Just right click K in tray and select Update. Why not upgrade to v7? Its free to all active key holders.

Hoof, I start a scan, then I saw that, good think I did not suceed to delette , I did the update. Rescan the file and it is working.
But it still mention Security alert treats have been detected, what can I do? Add to trusted zone? I delette from the list, is that correct?

It does a scan that takes about 20 minutes, and then tells me that I need to insert Windows XP professional disc 2 (even though I have WMCE installed). It doesn't like either of the 2 discs for the WMCE install.

You need an original disk not an OEM, which customized by the manufacturer.
Media Center Edition, usually has XP Professional as the base install.