Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Hidden Variant? IE Opening in Background

  • Please log in to reply
1 reply to this topic

#1 Lalaria


  • Members
  • 11 posts
  • Local time:03:27 PM

Posted 11 July 2010 - 08:31 PM

Hello everyone!

My laptop has been having some problems recently and I was hoping you could help me.

I recently posted this under the Windows XP forum but was told that I would have better luck here.

I am running Windows XP on a Dell Latitude E6400.

Whenever I boot my laptop, Internet Explorer also boots up and starts running. No visible windows pop up, but I can hear the clicking sound that IE makes as I am working. Sometimes an ad that you would normally find on a website starts to play. However, while this ad plays, no internet explorer tab is actually open. I'm a Firefox user myself. If I terminate IE in task manager, it will stop the ad's sound and IE will reboot within 5 seconds.

The only other symptom is that this virus seems to mess with my volume. I have to go into volume control and turn up the wave control every 30 minutes or so, since something keeps sliding it down to minimum.

I have already tired scanning with Malwarebytes Anti-Malware and SpyBot. The most that any of them has caught are multiple tracking cookies, which they claim to have erased. I recently scanned with Norton Anti-Virus, and it claims to have found 17 problems and fixed all of them. Seven of these were tracking cookies. The other ten are as follows:

keyworq.class contained threat Trojan.Gen
uutecwv.class contained threat Trojan.Gen
appletx.class contained threat Trojan Horse
loaderx.class contained threat Trojan Horse
payloadx.class contained threat Trojan Horse
appletx.class contained threat Downloader
hirwfee.class contained threat Trojan Horse
appletx.class contained threat Downloader
hieeyfc.class contained threat Trojan Horse
hiydcxed.class contained threat Trojan Horse

Norton says it has removed these, but I thought I would list what they are anyway. Just in case.

I also scanned multiple times with SUPERAntiSpyware, which consistently finds everywhere from 30-110 tracking cookies on my computer per scan. I have quarantined and deleted them.

I have checked Add/Remove Programs and can find no new programs in the list. I have not downloaded or installed anything recently (besides this virus apparently). I also checked the services list and cannot find any new services on the list.

On the forum where I originally posted this, someone mentioned that I might be infected with a hidden variant that is allowing someone access to my computer.

As of 4:02 PM, I just had an IE window ACTUALLY pop up. The site was http //www news28online com (with the spaces indicating where the periods were originally). Now, at 6:28 PM another window tired to pop up. Site was http //search actiongameinfo com/rugged_cpc html

Thank you in advance for any help you can provide! If there is already a forum post on this that I have overlooked, please send me the link.

BC AdBot (Login to Remove)


#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,490 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:06:27 PM

Posted 11 July 2010 - 10:35 PM

Hello and welcome Lalaria... We need a deeper look. Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users