Windows ExploreZip.worm

   This malicious worm sends itself as an email attachment called "zipped_files.exe". The message itself appears similiar to the following:

Hi Your Name Here!
I have received your email and I shall send you a reply ASAP.
Till then, take a look at the attached docs.
bye

   If the program is executed by the user (by double clicking on "zipped_files.exe"), the program will delete all Word, Excel and PowerPoint files as well as files of the types *.h, *.c, *.cpp and *.asm that exist on the hard drive and all other mapped (i.e., lan) drives.

   Once executed this malicious worm also spreads itself as an email attachment via MS Outlook. It continuously monitors the Outlook inbox and sends itself as a reply to anyone who sends an email to that user. You can recieve the executable file (zipped_files.exe) regardless of your email software, but it does need MS Outlook in order to propagate from your PC.

If you are infected you should follow these instructions:

• Remove the line run=C:\WINDOWS\SYSTEM\Explore.exe from the WIN.INI file.
• Restart your system.
• Delete the file C:\WINDOWS\SYSTEM\Explore.exe.