New Windows NT virus causing a scare

A new virus that Network Associates describes as "the most destructivevirus" its ever come across is causing a stir in the Windows NT communitysince it specifically targets everyone's favorite network operating system.The virus, which is known as

Paul Thurrott

December 20, 1998

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A new virus that Network Associates describes as "the most destructivevirus" its ever come across is causing a stir in the Windows NT communitysince it specifically targets everyone's favorite network operating system.The virus, which is known as "Remote Explorer," infects Windows clientmachines on an NT network at random, rendering files on those systems unreadable by applying to them an as-yet unknown encryption algorithm.

Remote Explorer works by installing itself on the Windows NT Server andthen giving itself the security setting of an administrator. The virusactually examines the layout of the network and randomly creates a scheme to infect every computer there. Furthermore, it stays dormant during theday, coming out only at night (!) while most workers are home and not using the machines.

Fortunately, Network Associates has already created a program that detectsthe virus and they will soon make a fix available that restores any data that was encrypted by the virus.

For more information, please visit the Remote Explorer page on the NetworkAssociates Web site

About the Author

Paul Thurrott

Paul Thurrott is senior technical analyst for Windows IT Pro. He writes the SuperSite for Windows, a weekly editorial for Windows IT Pro UPDATE, and a daily Windows news and information newsletter called WinInfo Daily UPDATE.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like