TechSpot

Explored.exe IS REALLY ticking off.

By OSidiot
Apr 25, 2004
  1. Alright, I saw this exe in my taskmanager last thrusday and I knew it was no good, so I looked it upon the net and lo and behold its some malicious file that acts as a herald for trojans or something. anyway, Ive followed the removal instructions, changed my regedit and deleted it out of system32 but it still comes back. i dont understand, i must be an *****. I operate Win 2000 Professional... please is there anyone out there who can help. thank you...
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    D/L Adaware and Spybot S&D. Install them, update them and then run them.
     
  3. Rick

    Rick TechSpot Staff Posts: 4,573   +65

    If this is a virus, it will replicate itself among other EXE files, so when certain files are run (such as important system files), the virus will reappear.

    Of course, this is unless you have a virus scanner which will clean the infected files.

    There's a great (and free) online virus scanner which will actually clean up infected files if it is able to. Here's the link:
    http://housecall.trendmicro.com/housecall/start_corp.asp
     
  4. OSidiot

    OSidiot TS Rookie Topic Starter Posts: 19

    i think its gone. but il run more scans just in case. my computer is a pos anyway, i just need time so i can back up all my crap. anyway, thanks for all the help.
     
  5. Electrox3d

    Electrox3d TS Rookie

    I thought it was gone too...

    Here here for OS*****...

    I am tech specialist and I've never had to fight a virus like explored.exe. I did the normal things to get rid of it. Of course I was running and had enabled the Auto-Protect in Norton, and it still didn't catch it. In fact this virus KILLS norton!

    It has come back three times so far, and now I'm peeved! I'm looking into running a prog called hackereliminator or swatit which is suppose to help.

    Also, when explored.exe is dormant and not running, if you try to virus scan it the virus scan doesn't even detect it... every once in a while it will auto detect it though. IRRITATING!:mad:
     
  6. OSidiot

    OSidiot TS Rookie Topic Starter Posts: 19

    Here, here to you Electrox!

    It seems I have smiten the heinous explored.exe. After changing my registry four times and searching for any mention of "explored.exe" it has yet to return. Usually each time I deleted it it would only come back. However, after going through my registry methodically I think I have removed it. I used the software mentioned in the first reply (adaware and spybot) and cleaned up alot of crap. my IE runs smoothly now too which is a bonus. If you are having any problems still you should try them out or go through safe mode and clean the registry. I dont know how much of this is just echoing what you already know but it cant help to say it again for anyone searching for ways to smite explored.exe.

    Firstly like some of its counterparts, explored.exe seemed to block symantec and macfee websites as well as many others. I had to locate my host file in system32/drivers (i think) and change it by opening the "host" file through text and deleting the urls it had blocked. Tricky little bastard... anyway. One other thing, if you run a network check your other drives. I had my C,D and F drives shared and I came across explored.exe on the F drive. I was like "wtf." I was forced to unshare all my drives. But that may not be an option for you. I am not sure that will even work, it seemed to come through my admin user. Oh well. Check your registry over and over again is all I can say. If you havent searched the net for "explored.exe" you should. It tells you the exact way. Otherwise I can try and explain it, even though I am an "OS*****," as best I can.

    Edit: One other thing, my subscription to Norton ended like a month ago and I cannot locate the number it asks for to renew. So I am out of any real help, but you are right explored.exe ended all attempts at running registry and antivirus programs as soon as I opend them Thank god for safe mod...

    Well hope you got rid of it. Till whenever, your neighborhood OS ***** signing off.
     
  7. Electrox3d

    Electrox3d TS Rookie

    Wow, so far i hadn't read ANYTHING about fixing the hosts file... I could have SWORN it was the new Internet Security from norton that was keeping me from those sites. THANKS. if you have any other good advice please feel free to post, because as much as I've delt with this, you seem to have done your homework well.

    Thanks again.
     
  8. OSidiot

    OSidiot TS Rookie Topic Starter Posts: 19

    Well, even with the urls removed from the host file I found that, since my Norton AV had expired, and I do not won any MacFee software that their help wasn't really going to work. Other than that it was merely locating the "explored.exe" startup in the registry form. A search registry for all "explored.exe" will locate it well enough if you dont want to sift through all those directories. The only problem I cam across was that I could never delete the MPR file. But it contained no "explore.exe" files so I doubt its threat is great. With all that said I do not believe there is anything else that I did that helped. The registry in safe mode, or a copy of the registry named "registry.com" (seeing as the virus only closes the .exe variant of the registry), should clear all of it away. But be sure to go over it several times, and always, before editing the registry, make a backup in case of any problems. Oh well. Hope that helps. I am sure the tech guys here know more about it. But that should set you on the right path.

    -OS*****
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...