Cyber
Sentry Trend
Micro
Your current security is already out of date
Virus Info

Get your Virus Stats
Free Online Virus Scan
Virus Alerts
Virus Tracking Center
Our System
How It Works
Services for ISP's
Virus Information
Virus Advisories
Help Section
FAQ
A Service, Not A Product
Why do you need this?
System Test
Hoax Virus Alerts
What is a Virus?
Safe Computing Guide

Glossary of Terms
More Info on Virus's
Register
End Users
Usage Policy
Marketing Resources
Logos
More
Contact Us
Virus Alerts By Email
Virus Information Center

WORM_APLORE.A   (low risk)

Virus type:   Worm
Destructive:   No

Aliases:
APLORE.A, Worm.PSecure, APLORE

Description:
This UPX-compressed, mass-mailing worm uses Microsoft Outlook and Visual
Basic Script (VBS) to propagate copies of itself via email. It originates
from a malicious Web site that prompts a visiting user to download and
execute its file, which is a malicious executable that displays a hoax
message.

Upon execution, it creates an auto run key in the registry, drops other
files, and copies itself into the System directory. Thereafter, it stays in
memory and sends advertising messages to to users connected to the same
Internet Relay Chat (IRC) channel as its infected user.

Solution:
1) Click Start>Run, type Regedit then hit the Enter key.
2) In the left panel, double click the following:
    HKEY_LOCAL_MACHINE>Software>Microsoft>Windows
     >CurrentVersion>Run
3) In the right panel, look for and then delete this registry entry:
    ”Explorer=%SYSTEM%\explorer.exe”
4) Close the registry.
5) Restart your system.
6)your Windows System directory, which is
   usually at C:\Windows\System.
   Click Start>Run,
   type C:\Windows\System or your Windows System directory then hit the
Enter key.
7) In the Windows System directory, look for and then delete these files:
   EXPLORER.EXE (copy of itself)
   PSECURE20X-CGI-INSTALL.VERSION6.01.BIN.HX.COM (copy of itself)
   EMAIL.VBS (detected as VBS_PSECURE.A)
   INDEX.HTML (detected as HTML_PSECURE.A)
   APHEX.JPG (image)
   HWND32.DLL (program usually truncates to 0 byte)
8) Scan your PC for viruses at
    www.antivirus.ie/index.mv?free_scan=1


 

 © 2002 Cyber Sentry Ltd. All Rights Reserved

Cyber Sentry -- Application Development Sitemap 1 2 3