Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 01-14-2007, 09:12 AM   #1
Beta Member
 
Join Date: Jan 2007
Posts: 1
Unhappy IEXPLORE.exe suspect virus

Newbie here! But I have discovered that my pc is most likely infected with iexplore.exe. anyone out there that can help?
I can't run any adaware, registry cleaner, virus scan, etc.
when I open the task manager there are multiple (8+) iexplore.exe running. When I close one it multiplies causing the cpu useage to spike up and down. Nothing else can run.

My McAfee had detected a registry change, which I blocked.
Affected Items: HKEY_USERS\S-1-5-21-2025429265-842925246-854245398-1005\software\microsoft\windows\current version\internetsettings\zonemap\Ranges\me\:Range
This didn't help.
Running very slowly and if left to sit will reboot about every thirty minutes and then it runs a disk scan.
__________________

utah12 is offline   Reply With Quote
Old 01-14-2007, 11:47 AM   #2
Daemon Poster
 
reece296's Avatar
 
Join Date: Aug 2005
Posts: 593
Send a message via MSN to reece296 Send a message via Yahoo to reece296
Default Re: IEXPLORE.exe suspect virus

Please post a hijackthis log here.

Download HJT: http://majorgeeks.com/downloadget315...406bfa98f.html
__________________

reece296 is offline   Reply With Quote
Old 01-15-2007, 04:35 AM   #3
Daemon Poster
 
Steff's Avatar
 
Join Date: Sep 2006
Posts: 1,435
Send a message via MSN to Steff
Default Re: IEXPLORE.exe suspect virus

Run your computer in safe mode, then give it a scan.
Steff is offline   Reply With Quote
Old 02-11-2007, 09:04 PM   #4
Solid State Member
 
WhiteHat's Avatar
 
Join Date: Feb 2007
Posts: 10
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by utah12
Newbie here! But I have discovered that my pc is most likely infected with iexplore.exe. anyone out there that can help?
I can't run any adaware, registry cleaner, virus scan, etc.
when I open the task manager there are multiple (8+) iexplore.exe running. When I close one it multiplies causing the cpu useage to spike up and down. Nothing else can run.

My McAfee had detected a registry change, which I blocked.
Affected Items: HKEY_USERS\S-1-5-21-2025429265-842925246-854245398-1005\software\microsoft\windows\current version\internetsettings\zonemap\Ranges\me\:Range
This didn't help.
Running very slowly and if left to sit will reboot about every thirty minutes and then it runs a disk scan.
You mentioned that you were infected with "iexplore.exe"; which could be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data.

Go to this site and run the free scan: http://www.liutilities.com/products/...seplib/?id=des

If it is the Trojan, it should be able to pick it up and offer you a way to clean it. Try to post the Hijack This log; there may be some useful information that could give us a better idea of how to proceed.

Good Luck!
WhiteHat is offline   Reply With Quote
Old 02-12-2007, 10:01 AM   #5
j03
~~~~~~~~
 
Join Date: Jan 2005
Location: Wales
Posts: 5,556
Send a message via MSN to j03
Default Re: IEXPLORE.exe suspect virus

Dude - the process is not registered as a trojan... Its actually internet explorer. Now a trojan could of named its self as iexplore.exe, but iexplore.exe is normally just instened explorer...

Quote:
Originally Posted by WhiteHat
You mentioned that you were infected with "iexplore.exe"; which could be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data.

Go to this site and run the free scan: http://www.liutilities.com/products.../seplib/?id=des

If it is the Trojan, it should be able to pick it up and offer you a way to clean it. Try to post the Hijack This log; there may be some useful information that could give us a better idea of how to proceed.

Good Luck!
j03 is offline   Reply With Quote
Old 02-12-2007, 09:41 PM   #6
Solid State Member
 
WhiteHat's Avatar
 
Join Date: Feb 2007
Posts: 10
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by samurai
Dude - the process is not registered as a trojan... Its actually internet explorer. Now a trojan could of named its self as iexplore.exe, but iexplore.exe is normally just instened explorer...
Yes, iexplore.exe is the main executable for Microsoft Internet Explorer; however, there is also a Worm with the same name (W32/Rbot-EZ) and the link I posted will perform a free scan to see if the computer has that particular worm. Normally, iexplore.exe is found in the C:\Program Files\Internet Explorer directory; but this beast copies itself to the %system% folder and contains a backdoor Trojan function that allows unauthorized remote access to the infected computer via IRC channels.

Now that you know, it would not hurt to run the scan to see if you actually have the worm/trojan.
WhiteHat is offline   Reply With Quote
Old 02-13-2007, 11:46 AM   #7
j03
~~~~~~~~
 
Join Date: Jan 2005
Location: Wales
Posts: 5,556
Send a message via MSN to j03
Default Re: IEXPLORE.exe suspect virus

Yeah, thats it. its just that inyour previous post, you seemed to by saying that it was a virus FULL STOP :P
j03 is offline   Reply With Quote
Old 02-13-2007, 04:37 PM   #8
In Runtime
 
Join Date: May 2005
Location: C
Posts: 401
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by WhiteHat
Yes, iexplore.exe is the main executable for Microsoft Internet Explorer; however, there is also a Worm with the same name (W32/Rbot-EZ) and the link I posted will perform a free scan to see if the computer has that particular worm. Normally, iexplore.exe is found in the C:\Program Files\Internet Explorer directory; but this beast copies itself to the %system% folder and contains a backdoor Trojan function that allows unauthorized remote access to the infected computer via IRC channels.

Now that you know, it would not hurt to run the scan to see if you actually have the worm/trojan.
EDIT: Oops, my bad. IEXPLORE.exe is main IE exe, but IEXPLORER.exe is adware executable. So easy to confuse those two.
Marshillboy is offline   Reply With Quote
Old 02-13-2007, 05:13 PM   #9
Golden Master
 
Raffaz's Avatar
 
Join Date: Sep 2006
Posts: 6,798
Send a message via AIM to Raffaz Send a message via MSN to Raffaz Send a message via Yahoo to Raffaz
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by Marshillboy
EDIT: Oops, my bad. IEXPLORE.exe is main IE exe, but IEXPLORER.exe is adware executable. So easy to confuse those two.
Eh? Hows it your bad? You havent even posted here lol
Raffaz is offline   Reply With Quote
Old 02-13-2007, 06:02 PM   #10
Fully Optimized
 
^Mike^'s Avatar
 
Join Date: Oct 2005
Posts: 2,958
Send a message via ICQ to ^Mike^ Send a message via AIM to ^Mike^ Send a message via MSN to ^Mike^ Send a message via Yahoo to ^Mike^
Default Re: IEXPLORE.exe suspect virus

Run some virus scans such as the free one on the Trend Micro website. www.trendmicro.com
__________________

^Mike^ is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 11:59 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0