Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Iexplore.exe Problems


  • Please log in to reply
2 replies to this topic

#1 Ollie

Ollie

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:21 AM

Posted 09 February 2007 - 03:00 AM

Multiple copies of iexplore.exe are appearing in task manager and when I try to end them they start up again, sometimes appearing as something by a different name them changing to iexplore.exe. This looks like it could be a virus or something, how do I get rid of it? I don't use internet explorer and have uninstalled it, spybot doesn't come up with anything.

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:21 AM

Posted 09 February 2007 - 06:46 AM

Internet Explorer is an intergal part of the operating system and should not be uninstalled. Even if you don't use it as your regular brower it is required by the operating system for certain functions. Do you mean that you removed user access to Internet Explorer?

You said Spybot didn't find anything. Do you have an anti-virus program and did it find anything when you scanned with it?
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,854 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:10:21 AM

Posted 10 February 2007 - 12:46 AM

Welcome to BC Ollie :thumbsup:
2 things: You do need Internet Explorer at the very least for Windows Updates. That said, the multiple iexplore's that pop up is indicative of infection.

I would suggest the following:

1) AVG Anti-Spyware 7.5
Download AVG AntiSpyware 7.5 (formerly Edwido) found here: http://www.ewido.net/en/download/
Directions for use in both normal and safe modes are provided here by our own quietman7:
http://www.castlecops.com/t137442-CCSP_Ewi...structions.html
You will also find the directions to disable the real-time scanning which I would advise doing right away as it is only available for the paid version which the free version is like for the first 30 days. I would suggest doing the scan in safe mode after setting up the proper scanning selections.

Here is a brief summary for installation and set-up. If scanning in safe-mode, set-up in Normal mode first, then reboot into safe-mode:
Double click the avg-setup file to begin installation and follow the prompts.
When the program has been installed, and you click the Finish button, AVG A-S will open.

Updating AVG Anti-Spyware:

* By default AVG A-S is configured to update automatically so, if you have an active internet connection, it should do so following installation. If you are unsure whether or not it has done so, do the following: Click the Update icon at the top and under "Manual Update" - click the Start update button.
* Either AVG A-S will update or inform you that no update was available.

Disabling the Resident Shield:
* By default the Resident Shield is active but as it may interfere with the process of cleaning your PC, it will need to be disabled.
(When the PC has been cleaned you can activate the shield again, if you wish.)
* Click the Shield icon at the top and under "Resident shield is..." - click active.
* This should now change to inactive.

Changing Recommended Actions
* Click the Scanner icon at the top and then click the Settings Tab.
* Under "How to act?" click Recommended actions and select "Quarantine" from the menu.

And for scanning:
Ensure that ALL open Windows / Programs / Folders are closed and then run AVG A-S.

* If it is not already selected, click the Scanner icon at the top and then select the Scan Tab.
* Click "Complete System Scan"
* While the scan is in progress the PC should be left otherwise idle.
* When the scan has completed, any threats that AVG A-S has detected will be displayed.
* Click the Apply all actions button at the bottom.
* When AVG A-S has finished, it will display the message "All actions have been applied".

Saving a report:
* Click the Save Report button at the bottom left and the "Reports" window will open.
* The content of the scan report will be displayed in the right hand pane and a copy will be automatically saved as Report-Scan-date-time.txt into the C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports folder.
* You will need to post a copy of this report into your next reply, so if it is more convenient, you can save another copy of this report elsewhere:
Click the Save report as button and select a destination by clicking the down arrow to the right of the Save in: text box and then click Save.

Close AVG Anti-Spyware.

xxxxxxxxxxxxxxxxxxxxxxxxx

2) Download and install SUPERAntiSpyware free found here: http://www.superantispyware.com/superantis...efreevspro.html

Be sure to click on the download button to the left, not on the free trial download on the right.

Install it and double-click the icon on your desktop, or your disk window to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.
· To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
· Click close and close again to exit the program.
xxxxxxxxxxxxxxxxxxxxxxxxx
3) Having done that I would suggest you follow the directions in this guide. Then create an HJT log, you will find the directions in the guide.

Create a new topic in this forum, not here and give it a good descriptive title. Briefly summarize what the problems are, what you have done to try to solve it, and what worked and didn't work and paste in your HJT log.

After you post your log, DO NOT make any further changes to your computer: deleting files, editing the registry, using special fix tools, installing or uninstalling software etc. as this will make it more difficult for the HJT team to help you.

Please be patient as the HJT team is very busy. DO NOT bump your log as the team may think that someone is already helping you. If you have not had a response in five days, add a response to the five days no response topic and paste in the link to your thread.

Orange Blossom :flowers:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users