Possibile MyDoom B Infection
On January 29th, 2004 on the heals of the MyDoom virus there appeared MyDoom.B.
This virus uses a known file name of Explorer.exe. Typically, you will not find Explorer.exe in your startup list unless you put it there. If you're
looking at your WinPatrol Task List and you are checking on C:\Windows\Explorer.exe that appears to be from Microsoft you're fine and should read the information offered above.
If it does not show Microsoft company and copyright information then you should remove it immediately, reboot and update any other virus protection software you use. Also look for CTFMON.DLL in your Task list and system folder and use WinPatrol to kill this file. While ctfmon.exe is a valid file name, ctfmon.dll is used by the MyDoom.B virus as a backdoor connection.
There is also a 'fake' explorer that installs with advertising spyware. More information about that program can be found here:
Fake Explorer with DLDER.exe