Regardless of the error message, the worm is actually hard-at-work replicating itself. Once an infected file is executed, users are presented with an erroneous error message: Access error #03A:94574: Invalid pointer operation. When a Kazaa user (unknowingly) searches and downloads one of file titles replicated by the worm, it propagates and infects that system. Through various links, I found out that the worm is received primarily through Kazaa, disguising itself as a list of music and video selections. which is also known as, TROJ_FILLHDD.A, W32/Benjamin.worm, Benjamin, Kazaa Worm, BackDoor-AEG, Trojan.Filler, or W32/Kazoa. Google gave me the results I was looking for - Explorer.SCR, was a Kazaa worm virus. Tip: Google is - by far - the most accurate search engine available. My next step was to get on and type in "explorer.scr" into the search engine. While file dates don't really mean much (because any virus can "fake" a file date), the file in question was relatively new, and I found that extremely apprehensive. I decided to locate the Explorer.SCR file, and noted its file date. At any rate, his screen saver wasn't running. SCR implies that the file is either a SCREEN SAVER or some sort of SCRIPT file. My next thought was that (usually) any file ending in. Low and behold - Explorer.SCR was running, and it was actively eating up a good portion of CPU and memory resources. I decided to press CTRL + ALT + DEL on the machine to run Task Manager to see what programs were running. Sure enough, the C drive had only 2 meg free, and his CPU usage was moving up and down like a Yo-Yo.
His skepticism grew deeper as he told me about the abnormally high CPU usage which was being reported under Windows 2000 - especially since his computer was sitting idle without anything (supposed to be) running in the background. So what happened to all the space I freed up? Suspicious of the problem, my friend's next question was, "do you think I have a virus?" Oddly enough, he said the computer was left untouched since I left his house the previous night. The next day, he called me back with the same problem. I freed up about 400 meg or so on his C drive. So, I hopped in my car, drove over to his place, and cleaned up some temporary files on his system.
On Friday, a friend called me up and told me that his "C drive" was full and that he couldn't do anything with his computer.
There is a nasty worm (virus) making its way through the Kazaa file sharing network.