Tuesday, June 15, 1999 Published at 17:15 GMT 18:15 UK
Computer virus takes its toll
Keeping computers safe is becoming harder
The problems caused by the computer virus Explore.Zip appear to be increasing, as it reveals new, unwelcome tricks.
It has also become apparent that the virus, which destroys files, scans computers for network connections and exploits these to cause further damage. This means all files on shared drives are in danger if only one connected computer activates the virus.
"It only takes one infected computer to rapidly spread within a company," said Mark Zajicek, a member of the Computer Emergency Response Team at Carnegie Mellon University, US. "That helps explain what we've been seeing - that the program wasn't spreading from site to site as quickly as it was within a site."
Friend and foe
The main method of virus infection was initially a seemingly friendly e-mail that tricked the recipient into opening an infected file and starting the virus program.
But the researchers at Carnegie Mellon found that the virus would reappear seconds after being removed from a computer - if that machine was linked to another infected machine.
It is now likely to take weeks rather than days to conquer the virus says Dan Schrader at Trend Micro, a maker of anti-virus software.
But he admitted it was "a very complex bit of code" and even his own company fell prey to the virus.
False sense of security
The virus propagates in the same way as the Melissa virus that infected computers worldwide earlier this year.
It uses your e-mail address books to send itself to people you correspond with. They get a personalised message which appears to come from you.
This can give people a false sense of security, leading them to forget a golden rule of virus protection - do not open files unless you are certain where they have come from.
Unlike the Melissa virus, the Explore.Zip virus carries a destructive payload. It not only destroys Microsoft software files including Word, Excel and Powerpoint files but also several types of programming code files (*.c, *.cpp, and *.asm) which are much harder to replace.
No normal recovery
Furthermore, Catherine Hampton from the alt.comp.virus newsgroup says that "it deletes files in a special way which means they can't be recovered by any of the normal file undelete or file recovery software available."
Computers which use alternatives (e.g. Linux) to Microsoft operating systems are not affected by the virus.
The impact of the virus on the many businesses affected is still being assessed. But the cost of recovering or replacing lost data, disinfecting computer systems and lost working time is likely to be huge.
Malicious viruses are becoming a regular burden on businesses and police authorities are putting a lot of effort into tracing the creator of Explore.Zip.
The people behind the recent Melissa and Chernobyl viruses were quickly caught, but there is no reported progress in the current case.