1. Symantec/
  2. Security Response/
  3. W32.ExploreZip.F.Worm


Risk Level 2: Low

September 11, 2000
February 13, 2007 11:34:16 AM
Also Known As:
W32/ExploreZip.worm trojan, Worm.ExploreZip

W32.ExploreZip.F.Worm is a variant of Worm.ExploreZip, a worm that contains a malicious payload. The worm uses Microsoft Outlook, Outlook Express, and Exchange to mail itself by replying to unread messages in the inbox. The email attachment is Zipped_files.exe, and its size is 210,432 bytes. The worm searches the mapped drives and networked computers for Windows installations, copies itself to the Windows folder of the remote computer, and modifies the Win.ini file.

Antivirus Protection Dates

  • Initial Rapid Release version September 12, 2000
  • Latest Rapid Release version March 3, 2008 revision 035
  • Initial Daily Certified version September 12, 2000
  • Latest Daily Certified version March 3, 2008 revision 037
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Raul Elnitiarta

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube