Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Can anyone tell me what explorer32.exe file does? Nortons Antivirus has picked up a virus (IRC Trojan) in this file and cannot repair it so has been quarantined. Nortons is up todate re downloads and the only option I've got is to delete it. Can anyone advise what I should do ?
Can I delete it then get another copy of it from my XP CD and put it back on?

Many times the reason it cannot be repaired is that the file only contains the virus packet. If it is quarantine you can send it to Symantec to have it analyzed, and verify that is what happened. I use my computer for a few days and everything is working properly I delete it from quarantine.
All the best!

Many times the reason it cannot be repaired is that the file only contains the virus packet. If it is quarantine you can send it to Symantec to have it analyzed, and verify that is what happened. I use my computer for a few days and everything is working properly I delete it from quarantine. I admit I am paranoid, but after a virus infection, I always use another company's free on-line virus scan(TREND MICRO, PANDA, MACAFEE).
All the best!

hi julie,
here's some info on explorer32.exe/Trojan Hack Attack:Name: Hack´a´Tack
Aliases: HAT,
Ports: 28431, 31785, 31787, 31788, 31789 (UDP), 31790, 31791 (UDP), 31792
Files: Hack'a'Tack.zip - 527,429 bytes Hack'a'tack110.zip - 537,799 bytes Hack'a'tack112.zip - 611,902 bytes Hacktack120.zip - 631,835 bytes Hat2k.zip - Hat2000.zip - 744,423 bytes Hackatack2000.a.zip - Hack´a´Tack.exe - 300,248 bytes Hack´a´Tack.exe - 304,893 bytes Hack´a´Tack.exe - 308,716 bytes Hack´a´Tack.exe - 317,868 bytes Hack´a´Tack.exe - 429,744 bytes Server.exe - 241,397 bytes Server.exe - 246,331 bytes Server.exe - 279,418 bytes Server.exe - 620,544 bytes Server.exe - 642,560 bytes Expl32.exe - Cfgwiz32.exe - Win32ip.cfg - variable no of bytes
Created: May 1999
Requires:
Actions: Remote Access / Hidden IP-Scanner
The trojan is able to decrypt cached passwords.
Versions: 1.0, 1.10, 1.12, 1.20, 1.2 te, 1.2 se, 2.1, 2000, 2000b,
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95 and 98. With somebugfiexes it will work on NTas well. Now there exists two beafed up versions called v.SE and v.TE withmany bugfixes included. Version 2000 is shareware!
Country: written in Germany ??hopes this helps,
cheers,
murve

i had a problem where the dos prompt kept popping up over and over. This was aafter i tried to install some bogus file from the net. I deleted explorer32.exe found in system in windows and the problem went away

I had the same problem:
First i wnet to symantec to do a big system scan:
Results:
It put bogus files in my kazaa shared folder, which were the virus'.
***I think, but may not be correct, but that explorer.exe is the same as explorer32.exe.
I looked in both.

I did resaerch on it and saw that It tried, on my computer, to created registry files called moo, but failed to do so. Then I saw a file called moo.txt with over 500 folder paths, maybe possible targets? One of the folders was c:\program files\kazaa\my shared folder.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |