is the main executable file for Microsoft Internet Explorer. If using Internet Explorer 8, it is my understanding that the browser will run an extra instance
of iexplorer.exe as part of the Automatic Crash Recovery
feature. Internet Explorer 8 will open a new process for the main window and another process with any opened tab. This feature allows Internet explorer to prevent itself from closing when a web site in one tab crashes. As such, it is not unusual to find multiple instances of iexplore.exe running in Task Manager
. However, one drawback of this new feature is that it has been reported to utilize high memory resources.
Most of the processes in Task Manager
will be legitimate as shown in these links.
Determining whether a file is malware or a legitimate process sometimes depends on the location
(path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a critical system file. However, it then places itself in a different location (folder) than where the legitimate file resides and runs from there. Another techinique is for the process to alter the registry and add itself as a Startup program
so that it can run automatically each time the computer is booted. A file's properties may give a clue to identifying it. Right-click
on the file, choose Properties
and examine the General and Version tabs.
Tools to investigate running processes and gather additional information to identify them and resolve problems:These tools will provide information about each process, CPU usage, file description and its path location.
Anytime you come across a suspicious file or one that you do not recognize, search the name using Google <- click here for an example
Or search the following databases:
If you cannot find any information, the file has a legitimate name but is not located where it is supposed to be, or you want a second opinion, submit it to Jotti's virusscan
. In the "File to upload & scan
" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.