Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 01-14-2007, 09:12 AM   #1
Beta Member
 
Join Date: Jan 2007
Posts: 1
Unhappy IEXPLORE.exe suspect virus

Newbie here! But I have discovered that my pc is most likely infected with iexplore.exe. anyone out there that can help?
I can't run any adaware, registry cleaner, virus scan, etc.
when I open the task manager there are multiple (8+) iexplore.exe running. When I close one it multiplies causing the cpu useage to spike up and down. Nothing else can run.

My McAfee had detected a registry change, which I blocked.
Affected Items: HKEY_USERS\S-1-5-21-2025429265-842925246-854245398-1005\software\microsoft\windows\current version\internetsettings\zonemap\Ranges\me\:Range
This didn't help.
Running very slowly and if left to sit will reboot about every thirty minutes and then it runs a disk scan.
__________________

__________________
utah12 is offline   Reply With Quote
Old 01-14-2007, 11:47 AM   #2
Daemon Poster
 
reece296's Avatar
 
Join Date: Aug 2005
Posts: 593
Send a message via MSN to reece296 Send a message via Yahoo to reece296
Default Re: IEXPLORE.exe suspect virus

Please post a hijackthis log here.

Download HJT: http://majorgeeks.com/downloadget315...406bfa98f.html
__________________

__________________
reece296 is offline   Reply With Quote
Old 01-15-2007, 04:35 AM   #3
Daemon Poster
 
Steff's Avatar
 
Join Date: Sep 2006
Posts: 1,435
Send a message via MSN to Steff
Default Re: IEXPLORE.exe suspect virus

Run your computer in safe mode, then give it a scan.
__________________
Steff is offline   Reply With Quote
Old 02-11-2007, 09:04 PM   #4
Solid State Member
 
WhiteHat's Avatar
 
Join Date: Feb 2007
Posts: 10
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by utah12
Newbie here! But I have discovered that my pc is most likely infected with iexplore.exe. anyone out there that can help?
I can't run any adaware, registry cleaner, virus scan, etc.
when I open the task manager there are multiple (8+) iexplore.exe running. When I close one it multiplies causing the cpu useage to spike up and down. Nothing else can run.

My McAfee had detected a registry change, which I blocked.
Affected Items: HKEY_USERS\S-1-5-21-2025429265-842925246-854245398-1005\software\microsoft\windows\current version\internetsettings\zonemap\Ranges\me\:Range
This didn't help.
Running very slowly and if left to sit will reboot about every thirty minutes and then it runs a disk scan.
You mentioned that you were infected with "iexplore.exe"; which could be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data.

Go to this site and run the free scan: http://www.liutilities.com/products/...seplib/?id=des

If it is the Trojan, it should be able to pick it up and offer you a way to clean it. Try to post the Hijack This log; there may be some useful information that could give us a better idea of how to proceed.

Good Luck!
__________________
WhiteHat is offline   Reply With Quote
Old 02-12-2007, 10:01 AM   #5
j03
~~~~~~~~
 
Join Date: Jan 2005
Location: Wales
Posts: 5,556
Send a message via MSN to j03
Default Re: IEXPLORE.exe suspect virus

Dude - the process is not registered as a trojan... Its actually internet explorer. Now a trojan could of named its self as iexplore.exe, but iexplore.exe is normally just instened explorer...

Quote:
Originally Posted by WhiteHat
You mentioned that you were infected with "iexplore.exe"; which could be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data.

Go to this site and run the free scan: http://www.liutilities.com/products.../seplib/?id=des

If it is the Trojan, it should be able to pick it up and offer you a way to clean it. Try to post the Hijack This log; there may be some useful information that could give us a better idea of how to proceed.

Good Luck!
__________________
j03 is offline   Reply With Quote
Old 02-12-2007, 09:41 PM   #6
Solid State Member
 
WhiteHat's Avatar
 
Join Date: Feb 2007
Posts: 10
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by samurai
Dude - the process is not registered as a trojan... Its actually internet explorer. Now a trojan could of named its self as iexplore.exe, but iexplore.exe is normally just instened explorer...
Yes, iexplore.exe is the main executable for Microsoft Internet Explorer; however, there is also a Worm with the same name (W32/Rbot-EZ) and the link I posted will perform a free scan to see if the computer has that particular worm. Normally, iexplore.exe is found in the C:\Program Files\Internet Explorer directory; but this beast copies itself to the %system% folder and contains a backdoor Trojan function that allows unauthorized remote access to the infected computer via IRC channels.

Now that you know, it would not hurt to run the scan to see if you actually have the worm/trojan.
__________________
WhiteHat is offline   Reply With Quote
Old 02-13-2007, 11:46 AM   #7
j03
~~~~~~~~
 
Join Date: Jan 2005
Location: Wales
Posts: 5,556
Send a message via MSN to j03
Default Re: IEXPLORE.exe suspect virus

Yeah, thats it. its just that inyour previous post, you seemed to by saying that it was a virus FULL STOP :P
__________________
j03 is offline   Reply With Quote
Old 02-13-2007, 04:37 PM   #8
In Runtime
 
Join Date: May 2005
Location: C
Posts: 401
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by WhiteHat
Yes, iexplore.exe is the main executable for Microsoft Internet Explorer; however, there is also a Worm with the same name (W32/Rbot-EZ) and the link I posted will perform a free scan to see if the computer has that particular worm. Normally, iexplore.exe is found in the C:\Program Files\Internet Explorer directory; but this beast copies itself to the %system% folder and contains a backdoor Trojan function that allows unauthorized remote access to the infected computer via IRC channels.

Now that you know, it would not hurt to run the scan to see if you actually have the worm/trojan.
EDIT: Oops, my bad. IEXPLORE.exe is main IE exe, but IEXPLORER.exe is adware executable. So easy to confuse those two.
__________________
Marshillboy is offline   Reply With Quote
Old 02-13-2007, 05:13 PM   #9
Golden Master
 
Raffaz's Avatar
 
Join Date: Sep 2006
Posts: 6,798
Send a message via AIM to Raffaz Send a message via MSN to Raffaz Send a message via Yahoo to Raffaz
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by Marshillboy
EDIT: Oops, my bad. IEXPLORE.exe is main IE exe, but IEXPLORER.exe is adware executable. So easy to confuse those two.
Eh? Hows it your bad? You havent even posted here lol
__________________
Raffaz is offline   Reply With Quote
Old 02-13-2007, 06:02 PM   #10
Fully Optimized
 
^Mike^'s Avatar
 
Join Date: Oct 2005
Posts: 2,958
Send a message via ICQ to ^Mike^ Send a message via AIM to ^Mike^ Send a message via MSN to ^Mike^ Send a message via Yahoo to ^Mike^
Default Re: IEXPLORE.exe suspect virus

Run some virus scans such as the free one on the Trend Micro website. www.trendmicro.com
__________________
^Mike^ is offline   Reply With Quote
Old 02-14-2007, 04:49 PM   #11
Fully Optimized
 
spywarebanisher's Avatar
 
Join Date: Dec 2006
Posts: 2,135
Default Re: IEXPLORE.exe suspect virus

... the guy hasnt even responded yet, yet u guys are spamming him with advice. maybe he already abandoned us. chill. my solution is to post a hijackthis log or try a virus scanner like avg free
__________________
spywarebanisher is offline   Reply With Quote
Old 02-14-2007, 05:03 PM   #12
Fully Optimized
 
joe pic's Avatar
 
Join Date: Feb 2006
Posts: 2,527
Send a message via AIM to joe pic Send a message via MSN to joe pic Send a message via Yahoo to joe pic
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by spywarebanisher
... the guy hasnt even responded yet, yet u guys are spamming him with advice. maybe he already abandoned us. chill. my solution is to post a hijackthis log or try a virus scanner like avg free

nah, i think he might be too embarrassed to reply
__________________
"I Don't like to repeat successes. I like to move on to other things." - Walt Disney
Proud Chrome OS Pilot Program participant
www.twovisionaries.com
joe pic is offline   Reply With Quote
Old 02-15-2007, 10:14 AM   #13
Proper Legend
 
dude_se's Avatar
 
Join Date: Nov 2004
Location: UK
Posts: 8,633
Default Re: IEXPLORE.exe suspect virus

Quote:
Originally Posted by spywarebanisher
... the guy hasnt even responded yet, yet u guys are spamming him with advice. maybe he already abandoned us. chill. my solution is to post a hijackthis log or try a virus scanner like avg free
dude youve repied to a few threads with replies like this. people come here for advice and thats what we are doing. in my thread you moaned at me for bumping my thread. we are not spamming him with advice. its called helping. you should try it sometime. anyway hijack this is great. has fixed alot of problems for me
__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Old 02-18-2007, 08:10 AM   #14
The Candyman
 
~mr mixx~'s Avatar
 
Join Date: Jun 2004
Location: USA
Posts: 11,355
Default Re: IEXPLORE.exe suspect virus

Quote:
Newbie here! But I have discovered that my pc is most likely infected with iexplore.exe. anyone out there that can help?
I can't run any adaware, registry cleaner, virus scan, etc.
when I open the task manager there are multiple (8+) iexplore.exe running. When I close one it multiplies causing the cpu useage to spike up and down. Nothing else can run.

My McAfee had detected a registry change, which I blocked.
Affected Items: HKEY_USERS\S-1-5-21-2025429265-842925246-854245398-1005\software\microsoft\windows\current version\internetsettings\zonemap\Ranges\me\:Range
This didn't help.
Running very slowly and if left to sit will reboot about every thirty minutes and then it runs a disk scan.
it may be that you have SPYWARE, or a TROJAN ,check out the links to see :

http://cexx.org/dlder.htm

http://techrepublic.com.com/5208-111...hreadID=200874

http://www.sophos.com/security/analy...ojservued.html

hope those links can clear up your prob.
__________________
" Let the music move you "
~mr mixx~ is offline   Reply With Quote
Old 02-19-2007, 01:20 AM   #15
Daemon Poster
 
RewtGuy's Avatar
 
Join Date: Dec 2004
Posts: 595
Send a message via AIM to RewtGuy
Default Re: IEXPLORE.exe suspect virus

Nothing against Antivirus software, but new custom trojans, worms, spyware, malware are coming out everyday.

Download a firewall (new one with default settings), when it asks for permission check out what's going on, permissions, ports. If you look into these things you usually can find out what it is, or what it's doing. You could also check out the data sent to there, what all is being sent. Might yield useful info.
__________________

__________________
Windows: A thirty-two bit extension and GUI shell to a sixteen bit patch to an eight bit operating system originally coded for a four bit microprocessor and sold by a two-bit company that can't stand one bit of competition.
RewtGuy is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 05:32 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0
×