태터데스크 관리자

도움말
닫기
적용하기   첫페이지 만들기

태터데스크 메시지

저장하였습니다.

보안관련소식2007. 12. 21. 14:00


2007년 12월 20일 Kaspersky 제품의 오진으로 윈도우 탐색기(Explorer.exe)가 삭제되는 사고가 발생했습니다.

실시간(자동치료)감시가 작동중인 경우 부팅할 때 정상파일이 제거되어 바탕화면에 아이콘이 나타나지 않는 현상이 발생하였으며, 국내외에서 다수의 피해가 보고되었습니다.

Kaspersky Lab 에서는 긴급 공지를 발표했습니다.

오진파일 => Explorer.exe : Worm.Win32.Huhk.c

---------------------------------------------------------------------------------------------------

False positive detection - system file explorer.exe 

Last night, on the 20th of December 2007, there was a false positive detection by Kaspersky Lab products on one of Windows system files: explorer.exe. Presently false positive has been corrected in anti-virus bases.

The following consequenses can happen:

  • Desktop is not visible
  • Start menu and system tray are absent

To solve the issue locally you need to do the following steps:

  • press on the keyboard simultaneously Ctrl, Shift and Esc 
  • in Task Manager select menu File 
  • click on New task (Run) 
  • click Browse 
  • locate the folder with installed product: 
    • Kaspersky Anti-Virus 7.0 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0 
    • Kaspersky Internet Security 7.0 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0 
    • Kaspersky Anti-Virus 6.0 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 
    • Kaspersky Internet Security 6.0 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0 
    • Kaspersky Anti-Virus 6.0 for Windows Workstations - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations 
    • Kaspersky Anti-Virus 6.0 for Windows Servers - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers
  • select file avp.exe

  • click button OK two times

  • repeat above described steps again to launch main program window 
  • after Kaspersky product window appears - update anti-virus databases 
  • in the main program window go to Reports and data files
  • in the right part of the screen select Backup 
  • select file C:\Windows\explorer.exe 
  • click on the button Restore
  • click YES 
  • as a target folder to which the file will be saved select folder C:\Windows 
  • click on button Save 
  • click on Close
    InformationOn the below picture as an example you can see file C:\Windows\explorer.com


  • minimize main program window 
  •  open up Task Manager again (press simultaneously Ctrl, Shift and Esc
  • in Task Manager go to menu FIle 
  • click on New Task (Run) 
  • click on Browse 
  • select folder C:\Windows
  • select file explorer.exe

  • click OK two times

If on your computer menu Start and Desktop are visible and working, you simply need to update anti-virus databases.

To correct the issue remotely on computer with Kaspersky Administration Kit 6.0 installed you need to do the following:

  • create/open policy for Network Agent
  • go to tab Settings
  • check the box Transfer information about objects: http://support.kaspersky.com/faq?qid=205057289#set
  • open in Console -> Storage -> Backup
  • restore file explorer.exe on computers with this problem
Posted by viruslab

댓글을 달아 주세요