Tech Problem Aggregator

m0rdre5a.exe, iexplore.exe, cradocranm.dll, y2q2ww3t.exe

Q: m0rdre5a.exe, iexplore.exe, cradocranm.dll, y2q2ww3t.exe

m0rdre5a.exe, iexplore.exe, cradocranm.dll, y2q2ww3t.exe

I've run a scan with the prevxcsi tool and it found all of those except iexplore.exe which i saw for myself in task manager

I'm getting popups with ads from "IE" even though I'm not using it, I only use firefox.

I then ran hijack this
I searched but could not find exactly the method for removing these things

thanks for the help
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:33:17 PM, on 11/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\csrss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\RTHDCPL.EXE
G:\Program Files\ASUS\Six Engine\SixEngine.exe
G:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
G:\Program Files\Logitech\MouseWare\system\em_exec.exe
G:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
G:\Program Files\Bonjour\mDNSResponder.exe
G:\WINDOWS\system32\ctfmon.exe
G:\WINDOWS\system32\PnkBstrA.exe
G:\Program Files\Viewpoint\Common\ViewpointService.exe
G:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
G:\WINDOWS\System32\alg.exe
G:\WINDOWS\system32\M0rdre5a.exe
G:\Program Files\Internet Explorer\IEXPLORE.EXE
G:\Program Files\Mozilla Firefox\firefox.exe
G:\Program Files\PrevxCSI\prevxcsi.exe
G:\Program Files\PrevxCSI\prevxcsi.exe
G:\Program Files\Trend Micro\HijackThis\HijackThis.exe
G:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - G:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - G:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Six Engine] "G:\Program Files\ASUS\Six Engine\SixEngine.exe" -r
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "G:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] G:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [AdobeUpdater] "G:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AdobeUpdater] "G:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" (User 'Default user')
O8 - Extra context menu item: Append to existing PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://G:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Locate Spot on Map by GPS - G:\Program Files\Opanda\IExif 2.3\IExifMap.htm
O8 - Extra context menu item: View Exif/GPS/IPTC with IExif - G:\Program Files\Opanda\IExif 2.3\IExifCom.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1224918484915
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1227400088125
O17 - HKLM\System\CCS\Services\Tcpip\..\{7ABC771D-7FE2-4B23-AD6C-BB11D5DDCF6B}: NameServer = 71.242.0.14,71.252.0.14
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - G:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - G:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CSIScanner - Prevx - G:\Program Files\PrevxCSI\prevxcsi.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - G:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PnkBstrA - Unknown owner - G:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - G:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - G:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 7869 bytes

More replies
Answer Match 55.02%

I am running a Dell Latitude D630 on Windows XP SP2. I was surfing the web using Firefox and noticed that the Internet Explorer pop-up blocker would sound frequently and a pop-up ad would show up every once in a while, usually for Toyota or Google toolbar. When I disconnect from the internet, I just hear the sound for a click and not the pop-up blocker.

I ran Symantec AV and it came up with M0rdre5a.exe and lKshoy0w.exe, but deleting/quarentine/clear does not get rid of them, neither does a manual deletion of the files. Ad-Aware detects M0rdre5a.exe as suspicious, but nothing else. Also, when I end IEXPLORE.exe in the task manager, it will regenerate a few seconds later. M0rdre5a.exe appears in the task manager, and regenerates once deleted. If you can help me out, please do so. I've attached the HJT log file. Thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:05:12 PM, on 10/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\Sys... Read more

A:Trojan - M0rdre5a.exe - IE Popup-blocker sound

16 more replies
Answer Match 42.42%

As of saturday Mbam keeps popping a window blocking:

2013/06/16 02:51:43 -0400    JEFFGRIZZLYPC    Jeff    IP-BLOCK    195.191.56.95 (Type: outgoing, Port: 64381, Process: iexplore.exe)
 
Multiple instances of Iexplore.exe in task manager.
Note: I run current MSE as well as current paid MBAM.  No torrent software on this machine at all.  I do NOT EVER use Iexplore as a browser either.  Only FF.
 
dds:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16576  BrowserJavaVersion: 1.6.0_26
Run by Jeff at 11:54:51 on 2013-06-17
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.24574.21065 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32... Read more

A:Iexplore instances in TM. Mbam blocking Iexplore from contacting...

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

--RogueKiller--
Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit Quit all programs that you may have started.Please disconnect any USB or external drives from the computer before you run this scan!For Vista or Windows 7, right-click and select "Run as Administrator to start"For Windows XP, double-click to start.Wait until Prescan has finished ...Then Click on "Scan" buttonWait until the Status box shows "Scan Finished"click on "delete"Wait until the Status box shows "Deleting Finished"Click on "Report" and copy/paste the content of the Notepad into your next reply.The log should be found in RKreport[1].txt on your DesktopExit/Close RogueKiller+
===

Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.

Please download AdwCleaner by Xplode onto your Desktop.
Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete tab follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).
===

Please download
Junkware Removal Tool to your Desktop.
Please close your security software t... Read more

8 more replies
Answer Match 40.32%

Hello,

I am in need of some help, as, since the other day, I have been getting IE popping up, when I'm busy with something else. Even when IE is closed, it still opens itself. I then saw that I had
3 running iexplore.exe processes running, but no open IE window...

It is very irritating when my game minimizes itself to view some online casino site that I DID NOT ask for

Help please!

-----

Logfile of HijackThis v1.99.1
Scan saved at 07:14:08 PM, on 2007/05/19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DeviceLock\DLService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\system... Read more

A:iexplore popups, and iexplore processes

7 more replies
Answer Match 29.82%

ok, well recently i got infected by something, and it left the virus protect pro malware thing on my computer

i got rid of that with avg spyware remover

but when i looked in process manager i noticed that there were 2 iexplore.exe processes running

i did a search for iexplore.exe in my files and folders and found it in 3 different places

one is in program files

the other is in C:\i386

and the last one is in C:\WINDOWS\BricoPacks\SysFiles and that one is called 68_iexplore.exe

so are those supposed to be there or am i infected with something

btw im using windows xp

A:Iexplore.exe

Internet explorer can be in several places: C:\I386, C:\WINDOWS\ServicePackFiles\i386\, C:\Program Files\Internet Explorer\, C:\windows\prefetch\ are a few, the best thing that I could say to do is to upload the file to Virus total or Jotti and see what results you get. Please make sure that you can view all hidden files. Instructions on how to do this can be found here:How to see hidden files in WindowsPlease click this link-->JottiWhen the jotti page has finished loading, click the Browse button and navigate to the following file and click Submit.C:\WINDOWS\BricoPacks\SysFiles 68_iexplore.exePlease post back the results of the scan in your next post.If Jotti is busy, try the same at Virustotal: http://www.virustotal.com/

12 more replies
Answer Match 29.82%

I keep getting an error that says " IEXPLORE.exe has generated an error and will be closed by windows. You will need to restart the program. An error log is being created"
Here is my HijackThis log :

Logfile of HijackThis v1.98.2
Scan saved at 9:48:15 PM, on 11/8/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINNT\system32\nvsvc32.exe
C:\Program Files\Tripp Lite\PowerAlert\Engine\paserver.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Common Files\WinTools\WToolsS.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\wfxsnt40.exe
C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Quick... Read more

A:IEXPLORE.exe

8 more replies
Answer Match 29.82%

Hi there.I'm having this "IEXPLORE.EXE" trying to connect to internet and to act as a server (i always block it with my firewall) but at every startup in moves to another subfolder under C:\WINDOWS and tries again. In the past i used to allow it assuming it was the authentic one (stupid i was) and God knows if i have my machine harmed. I have done all scans before posting my log.There my HJL goes, if you can find something suspicious:Logfile of HijackThis v1.99.1Scan saved at 08:35:29, on 08/04/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\Program Files\D-Tools\daemon.exeC:\WINDOWS\system32\igfxtray.exeC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\A4Tech\Mouse\Amoumain.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Microsoft AntiSpyware\gcasDtS... Read more

A:Iexplore.exe

Hello and welcome to the forum. You do have problems and this is the biggest: http://www.sophos.com/virusinfo/analyses/trojcrybotb.htmlFor your benefit, I want to make you aware you are running this service: http://castlecops.com/o23list-1143.html1) Download the attached zip file and unzip it to your desktop.http://www.mvps.org/winhelp2002/DelDomains.infRight-click on the deldomains.inf file and select 'Install'If you use SpywareBlaster and/or IE-Spyads, it will be necessary to re-install the protection.2) Disable the offending ServiceClick Start > Run and type services.msc Scroll down to DirectX Service and right click on it. Click Properties and under Service Status click Stop, then under Startup Type change it to Disabled.Delete the offending ServiceOpen HijackThis and click Config -> Misc Tools -> Delete an NT service. In the Delete window, type (DirectService) and press OK. OK any prompts, close HijackThis, and restart your computer.3) Microsoft AntiSpyware will block the HJT fix, turn it off until you are done. You also need to look at this information: http://russelltexas.com/malware/defender.htm Please do not download new software until we are finished.4) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =O2 - BHO: (no name) - {FF89E684-0C38-436A-BECA-CD5C6505DD49} - (no file)3O15 - Trusted Zone: *.slotchbar.com... Read more

2 more replies
Answer Match 29.82%

I have Windows XP Pro version 2002 Service pack 3.

When I have IE open the process iexplore.exe consistently uses 97-99% of CPU. For the past year I have also had problems with a wmiprvse.exe that continually recreates in C:\WINDOWS\Prefetch, however, I am not sure if they are related.

I downloaded HighjackThis and saved the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:50:41 PM, on 05/08/09
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\IdentityProtection\agent\Bin\AVGIDSAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\AVG\AVG8\IdentityProtection\agent\Bin\AVGIDSWatcher.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intuit\QuickBooks 2006\QBDBMgrN.exe
C:\W... Read more

A:iexplore.exe keeps CPU at 99%

Bump
 

1 more replies
Answer Match 29.82%

I recently downloaded AVG on my computer and I ran the scan. it has blocked iexplore.exe from connecting to the internet.

Any suggestions on how i can reconnect to the internet?


Thanks,
Fred

A:AVG and iexplore.exe

Hello and welcome to TSF, Fred2009!

PLEASE, follow these instructions :
Start Orb | type firewall.cpl, you'll now see this .

Now select Allow a program or feature through Windows Firewall to your left, as seen here .

At the bottom of the page select Allow another program... - you'll see a dialog titled Add a Program - select Internet Explorer or Internet Explorer (64-bit) (depending on which you prefer, I prefer Internet Explorer, myself).

If for some strange reason it doesn't appear, click Browse near the bottom of the dialog and search for :

C:\Program Files (x86)\Internet Explorer\iexplore.exe for Internet Explorer
C:\Program Files\Internet Explorer\iexplore.exe for Internet Explorer (64-bit)

At the bottom, select OK.

1 more replies
Answer Match 29.82%

For some reason, when I attempt to either restart or shutdown my computer, I recieve a message stating that if I attempt to end now I will lose any saved info etc.

Any ideas what this is?
 

A:IExplore.exe

7 more replies
Answer Match 29.82%

Hello, everyone! Forgive me if I'm slow to do or understand things; I'm new here, evidently.

I got on my computer this morning (the computer, to answer any questions, is a Dell Laptop: Studio 1555) only to be greeted with a lovely message claiming my computer was infected with viruses, malware, and/or adware and that I should download and run a scanner, etc. etc. etc. Like any person who isn't a complete idiot, I closed the dialog box and immediately went to Task Manager for an explanation. To my surprise, seven iexplore.exe processes were open, running, and consuming a hell of a lot of CPU (usage was clocked at 100% for several minutes on end). The processes at first would not close (everyone's favorite Access Denied dialog notified me of this), and, unforunately, I panicked. Several frantic internet searches led me to several websites stating that this was a 'treatable' virus.
'OK,' I thought, 'then why aren't the processes closing?'

I resorted to the assistance of a McAfee quick scan, but to no avail. Seeking another option, I nosed around on my computer and went to Task Manager for a second time, eventually being able to close the processes. A second surprise awaited me (I expect this to be a day full of surprises): a typical Windows "stopped working" dialog appeared proclaiming that File Loader had stopped working. I closed the application/process and looked for an explanation.
Nothing; however, I was directed t... Read more

A:iexplore.exe x 7

OK, McAfee's scan found 0 threats:

Processes Scanned: 96; 0 Processes Detected
Files Scanned: 341839; 0 Files Detected
Critical PC Files Scanned: 118673; 0 CPC Files Detected
Cookies Scanned: 40; 0 Cookies Detected
PC Startup Files Scanned: 3; 0 PCS Files Detected

For the record, everything is up to date.

So now I'm at a complete loss...

3 more replies
Answer Match 29.82%

My computer is randomly restarting every so often. Sometimes when it restarts I find that iexplore.exe is using 95-100% of the cpu. I have looked into the issue and tried AVG virus scan and ewido spy-ware detectors, along with a bunch of other solutions, but to no avail. This is my log:

Logfile of HijackThis v1.99.1
Scan saved at 15:27:04, on 08/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\Program Files\ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\spss_lmd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
F:\Program Files\iTunes\iTunesHelper.exe
F:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C... Read more

A:iexplore.exe

Hi there and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

Please be patient with me during this time.


We also suggest that you Subscribe to this thread to be notified of fixes as soon as they are posted by our Team. You can do this simply by clicking the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".

regards
alba

8 more replies
Answer Match 29.82%

I'm having a problem . Whenever I shutdown a website, I get an
error message that says:
iexplore.exe- application error
I don't know what to do about it.
I tried looking it up on the net, and couldn't really understand
what it meant. I think it said it might have something to do with
Norton. I do have Norton 2003. I just got a new hard drive 2 weeks ago. I'd really like this thing to run right.
Thanks for any help.
Pat
 

A:iexplore

Hi There!

The first thing you want to do is run Windows Update and make sure you have all service packs, critical updates, & browser patches downloaded & installed.

If you're still having problems, download & run either Ad Aware or SpyBot to check your system for spyware.

Also, a visit to HouseCall to run a scan might be a good idea too!
Good Luck!

ST
 

2 more replies
Answer Match 29.82%

hello out there! I've recently run into this problem with my laptop. When i'm connected to the internet the task manager shows IEXPLORE.EXE running at 99-100% CPU. When the task manager indicates IEXPLORE.EXE is not running at 100% CPU, the System Idle Process shows the CPU at 80-100 CPU while the CPU% down at the bottom of the task manager shows a range of 0-20%. This switch between IEXPLORE.EXE and the System Idle Process doesn't occur immediatley when i bring up internet explorer window. I'm not sure if its specific sites that are triggering this switch or it its just a certain amount of time before IEXPLORE.EXE shoots up to 100% CPU. I've been running Ewido, Panda, Kaspersky, Spy Bot, Ad-Aware, CWShredder, and doing the the reccomended steps listed on this site (steps 1 through 5) as well as Norton and Spy Sweeper that i've had on my laptop prior to this incident. Running these scans was a chore in itself because that's the time when the IEXPLORE.EXE shot up to 100% and made the downloads and installs take longer and in some cases froze the computer. When it goes into this mode, everything gets slower, when i move from browser to browser, parts of previous browsers appear on the front page, if i switch back to another browser it shows up blank until i click on the scroll bar. I've also noticed that when i'm in Safe Mode, Norton brings up an error and cannot work. It did this several times. Also, with each startup, Norton prompts me a message that I need to unins... Read more

A:100% Cpu, Iexplore.exe

Hello and welcome to TSF

I reccommend you Subscribe to this thread so you are notified of any replies via email. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

There isn't much showing in your log, so we'll try a general cleaning and see what turns up.

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

Downloads(make sure to save these in a permanent location)
Cleanup!- Install it. You will use this later.

*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does not make backups.

Double-click the icon on Desktop to launch Ewido. You will need to update Ewido to the latest definition files.On the left hand side of the main screen click update.
Then click on Start Update.
The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update Ewido
When you have finished updating, EXIT Ewido.

Next, please reboot your computer in SafeMode by doing the following:Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
Instead of Windows loading as normal, a menu should appear
Select the first option, to run Windows in Safe Mode.

Tools
Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu). ... Read more

19 more replies
Answer Match 29.82%

I re-booted my computer and for some reason it was going slower than usual. I then opened Windows Task Manager and found something new that I had never seen before called "IEXPLORE.EXE"

I decided to end the task just in case and when i pressed "end task" it just kept coming back, so i continued to do it and it just kept coming back! Here is my HiJackThis Log:

Logfile of HijackThis v1.99.1
Scan saved at 21:08, on 2008-04-19
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\PnkBstrA.exe
C:\WINDOWS\System32\PSIService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\WMP54GS Wireless Network Monitor\WLService.exe
C:\Program Files\WMP54GS Wireless Network Monitor\WMP54G.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ideazon\Zboard Software\Driver\ZboardTray.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\J... Read more

A:Iexplore.exe

bump!

1 more replies
Answer Match 29.82%

I was browsing on the site fanfiction.net. I've been on this site for over a year with little problem. But, when I went to go into my account, the 'download' bar appeared at the bottom of the screen. It stated this:iexplore.exe This type of file can harm your computer. Do you want to keep iexplore.exe anyway?There were the buttons saying 'Keep' and 'Discard'. There was also an 'x' in the corner. I clicked that.After talking to some friend and researching the file, I've realized that, yes, iexplore.exe is a virus. But I've had some conflicting answers—some say iexplore.exe is actually Internet Explorer itself. Now, when I looked up that, it was stated that removing Internet Explorer would cause the operating system to cease running. Now I am extremely frightened to discard that file. Although I've uninstalled Norton before, which came with the system, I believe—bad idea, I was forced to run CHKDSK, although my computer is fine now and the operating system works fine—I'm just not sure what would happen.I cannot find the file using search or through the 'Downloads' folder, but hitting 'ctrl+J' and going to the Chrome downloads page shows it. Here's a screenshot.http://oi44.tinypic.com/20fz609.jpg (Linked, as it's very big.)I am running a Windows Vista laptop, of the Toshiba brand. It has been infected and successfully fixed without wiping twice before, once by Vista Total Security 2011 ... Read more

A:iexplore.exe

Rest easy, iexplore is indeed a legitimate Windows executable. If you open the Task Manager while Internet Explorer is running you will of course see it in the Running Processes list.

Chrome was playing dirty pool!

2 more replies
Answer Match 29.82%

my computer has a 2.4 pentium, yet its running very slow and showing that 100 percent processor use in the task manager. I also see "iexplore.exe" in my process list in the task manager. When I disable it, it comes right back. I've run ad-aware, spybot S&D 1.4, norton virus scan, cws shredder....any help would be very appreciated...



Logfile of HijackThis v1.99.1
Scan saved at 10:46:14 AM, on 9/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Norton Personal Firewall\ISSVC.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\... Read more

A:iexplore.exe?.....help please

Please print these instructions out for use in Safe Mode.

Please download VundoFix.exe to your desktop. Double-click on it to extract the files to a new folder on your desktop.

Reboot your computer into Safe Mode.
Restart your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight Safe Mode then hit enter.

Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat
At the introductory screen, press <Enter> to proceed.
When asked to type in a filepath, please key this in:C:\WINDOWS\Fonts\javaad.dll
Press Enter, then press the F6 key, then press Enter one more time to continue with the fix.


Next you will be asked to type in a second filepath.
At this point please type the following file path (make sure to enter it exactly as below!):C:\WINDOWS\Fonts\daavaj.*

Press Enter, then press the F6 key, then press Enter one more time to continue with the fix.
The fix will run then HijackThis will open.
In HiJackThis, please place a check next to the following items and click FIX CHECKED:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Fonts\javaad.dll
O20 - Winlogon Notify: javaad - C:\WINDOWS\Fonts\javaad.dll
After you have f... Read more

8 more replies
Answer Match 29.82%

in task manager i have 5,6,7 or 8 lines that say in the image column iexplore.exe and the user name is owner.
sometimes i use 100% memory when nothing is running
sometimes music starts playing without being in i tunes

More replies
Answer Match 29.82%

my computer keeps slowing down every few minutes and i have 3 iexplore.exe processes using up all my memoryLogfile of HijackThis v1.99.1Scan saved at 3:29:27 PM, on 6/30/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5346.0005)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeC:\WINDOWS\system32\crypserv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exeC:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exec:\progra~1\intern~1\iexplore.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Opera\Opera.exeC:\WINDO... Read more

A:Iexplore.exe

Hello,* Open notepad and copy and paste next in it:if exist %systemdrive%\look.txt del %systemdrive%\look.txtcd\cd %appdata%dir /x >> %systemdrive%\look.txtcd %allusersprofile%\Application Datadir /x >> %systemdrive%\look.txtdir %Windir%\tasks /a:h >> C:\look.txtstart notepad %systemdrive%\look.txtSave this as look.bat , choose to save it as *all files and place it on your desktop.This is how the batch must look afterwards: Doubleclick look.bat and post the content of the txtfile you get in your next reply together with a new hijackthislog.

6 more replies
Answer Match 29.82%

My computer is running a process called iexplore.exe. I thought this was a normal Windows process except that it is running the process multiple times. In fact, there are nine separate instances of iexplore.exe running on my machine. Is this a virus?
Thanks

A:iexplore.exe

That's Internet Explorer. Multiple instances are created when new tabs are opened. Shutting down IE should delete all those processes.

1 more replies
Answer Match 29.82%

when i shut down my computer i get iexplorer.exe need to close(or something like that, can't remember.) why does this popup
 

A:do i need iexplore.exe

It's Internet Explorer, which hasn't shut down properly.

I recommend you get Firefox, it's a considerably better browser.

http://www.getfirefox.com
 

1 more replies
Answer Match 29.82%

I recently reformed my PC and everything seems to work fine, well everything but iexplore.exe.
It seems i cant use my adresse line to go to any page, so I gotta open everything with google which i use as my start page.
When i try to open any link or page my IE most of the time just snaps and the only thing i gotta do is close the page via alt-ctrl-del and redo everything. Its like when any other pages opens it snaps, like popup.
As said before iexplore.exe also use 99 CPU, I also cant download IE 7 i dont know why tho.
I have been reading some guides here and have been running SDFfix, ComboFix and Hjiackthis. this didnt solved the problem, i have been running this a couple of times. I forgot to save the first reports even tho it was some errors there who got fixed.
Here is the most recent ones:
this is the 2nd time i am doing this cuz i tryed to attach them but my IE snaped.
ComboFix :
ComboFix 08-11-16.05 -------------2008-11-17 21:42:26.3 - NTFSx86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1044.18.369 [GMT 1:00]
Running from: c:\documents and settings\-----------\Skrivebord\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2008-10-17 to 2008-11-17 )))))))))))))))))))))))))))))))
.
2008-11-16 17:34 . 2008-11-16 17:34 <DIR> d-------- C:\Program Files
2008-11-16 02:28 . 2008-11-16 02:28 578,560 --a--c--- c:\windows\system32\dllcache\user32.dll
2008-11-16 02:25 . 2008-11-16 ... Read more

A:iexplore.exe use 99 CPU

10 more replies
Answer Match 29.82%

Pretty sure this is not Internet Explorer!Formatting/installing SP3 is not an option currently, but otherwise up-to-date as far as SP2 is concerned.Very grateful for any help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 19:51:50, on 18/11/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16441)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\Rundll32.exeC:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exeC:\Program Files\Razer\DeathAdder\razerhid.exeC:\Program Files\RivaTuner v2.11\RivaTuner.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Strokeit\strokeit.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Razer\DeathAdder\razertra.exeC:\Program Files\Razer\DeathAdder\razerofa.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explo... Read more

A:HJT Log: IEXPLORE.EXE

Hello! My name is Sam and I will be helping you. I will do my best to communicate clearly to you so that we can resolve your issues as quickly as possible. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to fix your computer. Please communicate freely with me about how your computer is reacting and behaving as we work through this process.Please download random's system information tool (RSIT) and save it to your desktop.Double click on RSIT.exe to run it.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

13 more replies
Answer Match 29.82%

I've noticed some significant slowing in my computer as well as the whirring sound of the fan of a "working" computer. I checked the Windows Task Manager and found that the "Mem Usage" for iexplore.exe is running between 60,000k and 109,000k (current). I've looked online and it seems this is happens to others on an infrequent basis -- not to enough people to warrant an "easy" Spybot cleanup (or similar). I run AdAware, Spybot, Windows Defender, Anit-Virus Group (AVG), and Zone Alarm.

Please advise and help if possible. I'm open to comments and suggestions.

Thanks.

HLPlease

A:Iexplore.exe

Now that you have an open HJT log posted in the HijackThis Logs and Analysis forum, you shouldn't make any changes to your system.
Doing so could change the results of the posted log, making it difficult to properly clean your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

Thank You, OF

2 more replies
Answer Match 29.82%

Hi everyone,

I was hoping someone could help me.

I am running Windows XP SP2 with all latest updates from microsoft.

The situation is that whenever I restart my computer, I find that iexplore.exe is running as a SYSTEM process in the background. When viewing Task Manager > Performance I find that iexplore.exe utilizes 100% of the CPU approximately every 30 seconds for a duration of 5 seconds, and then drops back down to 0% CPU utilization. So basically is looks like this __/ \_____/ \_____/ \_____/ \_____ When I kill the process, it does not restart.

This is what I have done to try and resolve the problem:

1. downloaded sysinternals ProcessExplorer and found that C:\Program Files\Internet Explorer\iexplore.exe is being executed

2. run Nod32 v2.7, AVG (free version), Windows Defender, Ad-aware, CWShredder, SpyBot 1.4 and nothing has been found.

3. There is nothing in my StartUp folder

4. I have disabled all add-on's within internet explorer

5. there are no scheduled tasks running

6. deleted all content from the TEMP folder within my profile and system32.

7. ran msconfig and can't really find anything unusual

Would anyone know what is going on here? Is anyone familiar with this behaviour?

Any help most appreciated!

Many thanks
voirin
 

A:iexplore.exe using 100% of CPU

16 more replies
Answer Match 29.82%

Lately I have been noticing that I have been getting a lot more pop-ups than usual, that my PC has been running kinda slow. So, I ran a few virus scans and deleted some trojans. I checked my Windows Task Manager and I saw that IEXPLORE.EXE was running, first that it was in all capitals and that I don't even use Internet explorer (I use firefox) Then I saw that it could possibly be a virus so I ran Ad-Aware, AVG, Spyware Blaster, Zonealarm, and other programs that could help me. Ad-Aware picked up some, and AVG only got one. I find that sites to porn are up on my desktop (not actual websites, but .rar files). Also google redirects me to other webpages, like I would search Virus Scanners I would click a link, but it would bring me back to google, or some other website.
Code:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:07:01 PM, on 8/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNS... Read more

More replies
Answer Match 29.82%

causing interner explorer to shut down...........can't remeber how to fix this??????????
 

More replies
Answer Match 29.82%

Hi GuysCan you help me please? I am having problems that I think are the result of an infected iexplore.exe file. Strange changes to my dial-up user name, password and some popups.The Hijackthis log is as follows:Logfile of HijackThis v1.99.1Scan saved at 18:51:20, on 16/09/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\BT Yahoo! Internet\ModemLock.exeC:\WINNT\system32\spool\DRIVERS\W32X86\3\DLCCserv.exeC:\WINNT\System32\svchost.exeC:\PROGRA~1\Iomega\System32\AppServices.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\WINNT\Explorer.EXEC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\svchost.exeC:&#... Read more

A:Iexplore.exe

You may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedF3 - REG:win.ini: run=C:\WINNT\system32\svhost.exeO4 - HKLM\..\Run: [Sysnet] C:\WINNT\system32\snuninst.exe O4 - HKLM\..\Run: [itunesff] C:\WINNT\system32\itunesff.exe -go -c29 -w91O15 - Trusted Zone: *.frame.crazywinnings.comO15 - Trusted Zone: *.frame.crazywinnings.com (HKLM) O16 - DPF: {33331111-1111-1111-1111-611111193429} ? O16 - DPF: {33331111-1111-1111-1111-615111193427} ? O16 - DPF: {CT id=e codeBase=http://www.www2.p0rt2.com/files/epl29bf2.cab classid=clsid:33331111-1111-1111-1111-615111193427} ? O16 - DPF: {E cellSpacing=5 cellPadding=3 width=400} -DownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box. C:\WINNT ... Read more

12 more replies
Answer Match 29.82%

hi everybody, hope 2009 has kicked off well for you all.

Could anybody please enlighten me on what iexplore.exe is,
is it harmful, virus related? Should it be removed & how would i do this?

Thankx
 

A:iexplore.exe

16 more replies
Answer Match 29.82%

Is there any way to not have iexplore.exe use up tonnes of memory (ie. 90+ %). It slows down my laptop and obviously very annoying. I'm allowing 250MB use of disk space for temp files...still occurs after a ccleaner clean up. TIA
Running MS Windows XP SP2
Mobile Intel Pentium 4 - M CPU 2.00 Ghz, 767MB Ram
 

A:iexplore.exe

What are you looking at that makes you think that IE is using that percentage ?
 

3 more replies
Answer Match 29.82%

HELP! I've just signed up for a games page & whenever I attempt to access it, I get an IEXPLORE.exe message stating an error has been logged & my connection is closed. I have used the same website with limited access in the past with no problems. What can I do to correct the problem? Tks.......Doug
 

A:IEXPLORE.exe

You might try downloading a newer version of Internet Explorer (in particular, IE 7).
 

1 more replies
Answer Match 29.82%

Hi, I recently upgraded from XP SP2 to Vista Home Premium. Since then, I have been getting a problem where in taskmanager the task iexplore.exe uses 100% of the cpu. This sometimes happens while Internet Explorer 7 is open, but mostly when I have closed it. There are sometimes 2 or more tasks going by this name running. It is getting really frustrating, I have run Ad-Aware and Norton scans but with no results. Here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 10:55:15 AM, on 4/06/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\HP\KBD\KBD.EXE
C:\Windows\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9c.exe
C:\Users\Gazza\Documents\Other\Miscellan... Read more

A:iexplore.exe 100% cpu

-Bump

3 more replies
Answer Match 29.82%

For some reason, my iexplore.exe is using 110,000 K even though my internet is running at the normal speed. Is this a common problem? How can I resolve it?

I'll gladly give any extra required information.

Thankyou,
-R.
 

More replies
Answer Match 29.82%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:41:22 PM, on 1/2/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\system32\tcpsvcs.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\dllhost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\WINDOWS\eHome\ehmsas.exeC:\hp\drivers\hplsbwatcher\lsburnwatcher.exeC:\Program Files\HP\HP Software Update\HPwuSchd2.exeC:\Program Files\Common... Read more

A:iexplore.exe

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the ... Read more

2 more replies
Answer Match 29.82%

The process iexplore.exe keeps returning on the Windows Task Manager showing "SYSTEM" as the username. Internet Explorer is not running and if I end the iexplore.exe process, it just reappears a few seconds later. Spyware Detector and Symantec Antivirus do not detect anything. Please help me get rid of this false iexplore.exe. Here is the the DDS log:
DDS (Version 1.1.0) - NTFSx86
Run by DANILO DIEDRICHS at 22:18:50.29 on Sat 01/03/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.502.49 [GMT -6:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software&#... Read more

A:iexplore.exe

Hello MNewmark Welcome to BleepingComputer ========================Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

13 more replies
Answer Match 29.82%

Hi !!Not quite sure if this is the right place for this question...Can iexplore.exe become hijacked by a trojan of other malware??I'm asking this because my firewall Comodo Pro does not recognise iexplore.exe as a legitimate application. Bit odd... But as iexplore.exe is trying to modify settings of other applications, I'm a bit worried that this may be signs of trojan activity.Greetz and thanks upfront ;)

A:iexplore.exe

Do a search on your hard drive for files named iexplore.exe and report back what you find.

8 more replies
Answer Match 29.82%

Hi Guys.
After many many months of trouble free computing, I have a fly in the ointment by the name of 'iexplore.exe'
For the past few days, it has taken an age to open an email. (I use Googlemail) The culprit is 'iexplore.exe' which is taking up 100% of my cpu and slowing the system to a crawl. I can use the internet fine, this problem only occurs when using email. I've done anti virus and spyware scans and they have turned up nothing. I'm running a 1gig processor with 2MB ram so it should be plenty fast enough. I've tried testing other internet applications and everything zips along just fine but when I return to my emails and click on one, my CPU shoots straight to 100%.
I would be grateful for any ideas for a fix

Regards
Alex

A:iexplore.exe

Hi akex,Have you tried using System Restore to see if you can return your computer to the state it was in when it was working? If you've never done this before, Go to Start / All Programs / Accessories / System Tools / System Restorecheck the box to Restore my computer to an earlier time and click on Next. You'll see a calendar with highlighted dates. Choose one of the dates just preceeding these problems and allow your system to return to that date. See if the problem goes away.If this doesn't work, go back into System Restore as per the above instructions, only this time choose the option to reverse the change you made.For Vista: http://www.bleepingcomputer.com/tutorials/...43.html#restoreLet me know if this works.Zllio

7 more replies
Answer Match 29.82%

Hi,

Windows XP Media Center Edition

I have the process iexplore.exe that runs even when Internet Explorer is not open, and it uses up alot of my system resources. Any attempt to end the process fails as it just reappears within a few seconds. I have tried scanning with AVG, Ad-Aware, Spybot S&D, and Malwarebytes with no help. I've looked around for a solution but could not seem to find one anywhere. Someone suggested to run GMER, so I have it scanning as I type this and can post the log when it finishes if it will help.

Thank you
Nick

A:iexplore.exe

Ok, here are the results from GMER:GMER 1.0.15.15011 [nm70sbcj.exe] - http://www.gmer.netRootkit scan 2009-08-06 13:26:30Windows 5.1.2600 Service Pack 3---- System - GMER 1.0.15 ----Code 89FA8500 pIofCallDriver---- User code sections - GMER 1.0.15 ----.text C:\WINDOWS\Explorer.EXE[528] C:\WINDOWS\Explorer.EXE section is writeable [0x01001000, 0x44C09, 0xE0000020].reloc C:\WINDOWS\Explorer.EXE[528] C:\WINDOWS\Explorer.EXE section is executable [0x010FB000, 0x8800, 0xE0000040]? C:\WINDOWS\System32\svchost.exe[2352] image checksum mismatch; number of sections mismatch; time/date stamp mismatch; ? C:\WINDOWS\System32\svchost.exe[2376] image checksum mismatch; number of sections mismatch; time/date stamp mismatch; ? C:\WINDOWS\System32\svchost.exe[2496] image checksum mismat... Read more

5 more replies
Answer Match 29.82%

hi guy,
my problem my laptop
when i start my win xp
the screen start to turn on and off ,
when i open " window task manager"
it show that my " iexplore.exe" strart to turn on and off
i can't even run any application
need yur help guy
 

A:Iexplore.exe

9 more replies
Answer Match 29.82%

hello. Internet explor is shutting me down. i get an error message with the following:

error signature. appname:iexplore.exe appver:7.0.1.6000.16735

modname: pctlsp.dll modver:1.0.88.0 offset:0003d55

It happened twice on the trot and I would like some help please

A:iexplore.exe

pctlsp.dll is the PC Tools Layered Service Provider
I'd suggest downloading a new copy of the PC Tools software,
Then uninstall the current PC Tools
Then install the newly downloaded software.
Update it and then test to see if the problem still exists.

3 more replies
Answer Match 29.82%

Hi,I keep getting Internet Explorer pop-ups about anti-virus programs such as Stopzilla when I have Firefox openalso, the iexplore.exe process takes up a lot of CPU so I ran hijackthisheres the log:Thanks!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:57:38 PM, on 3/18/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\AskBarDis\bar\bin\AskService.exeC:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exeC:\Program Files\McAfee\MBK\MBackMonitor.exeC:\... Read more

A:iexplore pop-ups even when not using ie

Now, there is a process mcods.exe that is taking up 25 - 50 CPU.

3 more replies
Answer Match 29.82%

Guys I have this exe file 'IEXPLORE.EXE' runing on my system even though I dont use IE it takes up a lot of memory and it always runs in pairs I could actually see it in task manager and it can never be deleted. help me guys this is my report from hijack this:

Logfile of HijackThis v1.99.1
Scan saved at 11:27:58 AM, on 3/4/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\BitComet\BitComet.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\AdwareAlert\AdwareAlert.exe
c:\progra~1\intern~1\iexplore.exe
C:\Documents and Settings\Administrator\My Documents\My Music\setup\utorrent.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgwb.dat
c:\progra~1\int... Read more

A:IEXPLORE.exe

8 more replies
Answer Match 29.82%

Ok, my internet runs fine but when I try to open a new window it takes "forever" like close to 10 mins to load. Once it's loaded everything is ok. Anyway, I look in my task manager and it keeps trying to open numerous iexplore.exe, almost the whole list is filled with them. Is there any way to get rid of these?
 

A:iexplore.exe

iexplore is a virus but gets confused and mixed up with genuine iexplore install
http://www.processlibrary.com/quickaccess/ then open it and follow instructions it will check on what you have running
 

1 more replies
Answer Match 29.82%

I have just had an infection with XP SecurityCenter Malware.

Used Malwarebytes to remove it.

Now getting 3 instances of IEXPLORE.EXE in Taskmanager - one of which uses 100% CPU for about 2 minutes after startup.

Have used SuperAntispyware and ComboFix, but it is still doing it

XP Home

Here is a HJT log

Thanks

============

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:21:45, on 02/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\wanmpsvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
... Read more

A:IEXPLORE.EXE using 100% CPU

6 more replies
Answer Match 29.82%

I've been noticing that iexplore.exe has been running in my task manager like 106,816K and up.Can anyone tell me what this is,and way its running that much?

Logfile of HijackThis v1.99.1
Scan saved at 7:33:24 AM, on 3/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\USB Storage RW\udsi.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
C:\Prog... Read more

A:iexplore.exe

Anyone?
 

2 more replies
Answer Match 29.82%

I have 2 iexplore.exe. There is a new hard drive in this laptop with vista service pack 1..I sent it back to Acer becouse of crash problems and have had it back for a few weeks.This time I left the Acer software installed hoping it would run better. It was good for 2 weeks and now its so slow, I can not open more than 2 windows without having to wait 5 min.When I turn it on 1 out of 2 times it shuts off before it boots.I checked task manager and found 2 iexplore.exe.I don't know what should be running, it 89 process going using all the recourses.Thank for your help. The logs.
DDS (Ver_09-03-16.01) - NTFSx86
Run by Acer at 2:37:55.57 on Tue 05/05/2009
Internet Explorer: 8.0.6001.18702
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.1014.353 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\Ex... Read more

A:I have 2 iexplore.exe.

Hello and welcome to TSF.

Sorry for not being able to have replied to your topic. If you still need help, please start a new thread and post a fresh set of logs requested in our pre-posting process outlined below, as it has been quite a while since you posted:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

1 more replies
Answer Match 29.82%

I think I have that iexplore.exe bug.

Here are my results from HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:26:30, on 20/06/2008
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Az\Desktop\hijackthis\... Read more

A:iexplore.exe? My HJT log...

Hi and welcome to TSG,

I have to ask why you are running XP with no Service Packs installed?
 

1 more replies
Answer Match 29.82%

Why can nothing rid my PC of iexplore.exe
It multiplies itself in Windows Task Manager, eating up the memory, so that performance gets slower and slower until the PC effectively grinds to a halt.
I have just had the complete scan treatment by Avast for the first time and this has not dealt with it. Why not??  (although it did find and quarantine other stuff, thanks v. much).
I have also run MBAM, adwcleaner and ComboFix, all of which have failed to eliminate this menace which is iexplore.exe
Why is this so difficult to deal with?
Are there any former sufferers out there who found a solution to the problem?

A:iexplore.exe

what version of internet explorer are you running? anything below and including 8 Shula be updated to a newer version. Try updating to a newer version, and see if this resolves your issue.

4 more replies
Answer Match 29.82%

I use Windows XP professional. I have been getting an iexplore error at shutdown. I have to press end now about 4 or 5 times before it shuts down. Can anyone help me? This is my HT log:

Logfile of HijackThis v1.99.1
Scan saved at 8:27:57 AM, on 5/28/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\mnmsrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C... Read more

More replies
Answer Match 29.82%

iexplore appears three times in task manager. My computer shows little sign of any problems other than it can be slow to load up.

The Memory usage flutuates a little but i will show you what they are at present. I have just logged on to write this fault up.

65,444K

20,32K

40,684K

Hope you can assist. Regards Kev

A:iexplore.exe

What OS (Win 2K, XPsp1, XPsp2, Vista) are you using?What version of IE are you usingIf you do a Google search for multiple instances of iexplore.exe running in Task Manager, you will find numerous complaints with various causes and possible solutions. This problem could be malware or non-malware related. There are worms like W32/Lovgate-AD that will cause the same problem you are experiencing. In addition to other files it drops iexplore.exe in C:\Windows\system32. One of the ways that malware tries to hide is to give itself the same name as a critical system file like iexplore.exe. However, it then places itself in a different location on your computer. The legitimate iexplore.exe is located in the C:\Program Files\Internet Explorer folder. Make sure of the spelling. If it is iexplor.exe or iexplorer.exe, then it's malware. Also check to make sure iexplore.exe is not loading at startup as that too can be malware. NOTE: If you are using Internet Explorer 8, it is my understanding that it it will run an extra instance of iexplorer.exe as part of the Automatic Crash Recovery feature. Internet Explorer8 will open a new process for the main window and another process with any opened tab. This feature allows Internet explorer to prevent itself from closing when a web site in one tab crashes. It has also been reported that this utilizes high memory resources.

3 more replies
Answer Match 29.82%

hi i keep getting this pop up box in my tray bottom right of computer its a yellow triangle saying i might have a backdoor trojan that allows the remote hacker to perfom various malicious actions click this baoon to download removal software , i have ran norton 360 and reg cure but its still there, plus internet explorer pop up comes and goes
 

More replies
Answer Match 29.82%

Can anyone help?

A second version of iexplore.exe runs in background seems to launch itself randomly, I can delete it from task manager but it pops back in again takes up a lot of memory.
Tried running Spybot Superantispyware Malwarebytes but still got same problem appreciate any help.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:09:58 PM, on 02/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files... Read more

More replies
Answer Match 29.82%

Hello, first thank you to BC for giving me the tools to fix 2 rogue fake security programs and the alureon viruses/trojans.

My computer is now free of all the bad stuff (again, THANK YOU!), but I am confused about iexplore.exe. I was instructed to download a kill program and rename it to iexplore.exe which I did and did all the subsequent work to remove all the bad stuff and I don't know what do to with this iexplore program now on my desktop. Can I delete/uninstall it? I am confused because iexplore is currently running in my task manager. I read somewhere that this is part of IE8 and others say it is malware? Is the iexplore that I got from BC and was asked to rename to run to kill my malware the same thing that is running in my task manager?

Thanks!

A:iexplore.exe

You can also delete the Explorer.exe program from your desktop. that is really MBAM renamed.Not the one in Task manager as you are correct about that one.

2 more replies
Answer Match 29.82%

Alright so I started to notice that when I would open Opera, an add window for IE would pop up. This is of course strange. I ran a full virus scan with Bit Defender 10, and adware scans with Ad-Aware and Spybot. Nothing shows up.

When looking in my Task Manager, there are two processes called IEXPLORE.EXE, which cannot be terminated. I know it's the standard process name for IE, but I remember hearing something about a Trojan that took on the same process name, and since I can't seem to terminate the program, and none of my scans find anything, I figured I would ask.

Let me know if you need any other information, and sorry if I posted this in the wrong place, this seemed like the right location sort of.

Thanks!.

A:Iexplore.exe

Hi Scaver, welcome to TSF...

the first thing I would suggest is reinstalling Opera as some registry keys may have become corrupt during install/operation.

If that doesn't help, I recommend reading through this post as it advises on the steps to take before posting a HiJack This log file here.

I know you mentioned you have already scanned for viruses etc but some nasties have a way of hiding from detection.

Also, has this always happened since installing Opera? Are you using a beta version of the software? Are you able to try a different version?

13 more replies
Answer Match 29.82%

Please help -- something called "iexplore.exe" has gotten on my laptop. It replicates itself, according to my Task Manager, and gobbles up all my CPU's, causing me multiple freeze-ups. Is anyone familiar with this pestilence?

A:iexplore.exe

iexplore.exe is the main executable file for Microsoft Internet Explorer. If using Internet Explorer 8, it is my understanding that the browser will run an extra instance of iexplorer.exe as part of the Automatic Crash Recovery feature. Internet Explorer 8 will open a new process for the main window and another process with any opened tab. This feature allows Internet explorer to prevent itself from closing when a web site in one tab crashes. As such, it is not unusual to find multiple instances of iexplore.exe running in Task Manager. However, one drawback of this new feature is that it has been reported to utilize high memory resources.Most of the processes in Task Manager will be legitimate as shown in these links.List of common system processes found in XP's Task ManagerCommon system processes found in XP's Task ManagerTop System ProcessesDetermining whether a file is malware or a legitimate process sometimes depends on the location (path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a critical system file. However, it then places itself in a different location (folder) than where the legitimate file resides and runs from there. Another techinique is for the process to alter the registry and add itself as a Startup program or service so that it can run automatically each time the computer is booted. A file's properties may give a clue to identifying it. Right-click on the file, choose Properties and examine ... Read more

1 more replies
Answer Match 29.82%

ok when i was just playing cs it just closed down and my whole taskbar was gone so i restart the computer then my net isn't working anymore so i restart again and next thing i know i get this message
iexplore.exe - Application Error
The instruction at"0x00000000" referenced at "0x00000000". The memory could not be "read". Click ok to terminate the program.
and also i cant even open norton antivirus or even check my processes in windows task manager. anyone know what my problem can be??
 

A:iexplore.exe

7 more replies
Answer Match 29.82%

How many iexplore.exe should be running at one time?
Sometimes there are 4 or 5 displayed in the windows task manager.
Recently, it seems that iexplore.exe will frequently use most of the available system memory.
Any information or links to iexplore.exe that will help my understanding of this process would be appreciated.
Thanks

A:how many iexplore.exe

Starting with IE8, when started, IE will open 2 iexplore.exe processes from the get go.
Consecutive processes will be added by opening more tabs.

5 more replies
Answer Match 29.82%

Hi,
Every now and then my system slows down to treacle, and when I check Task Manager find that iexplore.exe is using close to 100% cpu. Even when I close IE, the exe file continues to use almost all of the cpu. Just ran HijackThis - the log is shown below. I have no idea which of the 49 detected problems to fix - do any look like they'd be causing the iexplore.exe problem?

I use Avast AV software, and Windows firewall is on.
I have a number of Google applications - Gmail, Desktop and Toolbar.

Thanks if anyone can help!
-----
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:22:21 PM, on 1/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\syste... Read more

More replies
Answer Match 29.82%

every so often i get this message on MY pc

could someone help
Application popup: iexplore.exe - Application Error : The instruction at "0x7c9105f8" referenced memory at "0x018b0010". The memory could not be "read".

Click on OK to terminate the program
 

More replies
Answer Match 29.82%

I always have to instances of iexplore.exe running in my processes. I no longer even have internet explorer installed on my computer. I can't figure out how to get rid of them. They take a lot of memory, and there's a program that restarts them titled : Infocreative.exe which I also can only delete when I run the computer in safe mode, but when I restart they come back. I tried another website for help, but they ignored my thread. Anyway, here's my hijack this log and thank you so much in advance for any help.
Logfile of HijackThis v1.99.1
Scan saved at 9:21:09 PM, on 12/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\HP\KBD\KBD.EXE
C:\hp\drivers\video\HKCMD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\W... Read more

A:iexplore.exe

Welcome to TSG....

Internet explorer is an integral part of Windows and if it is removed it will harm Windows to such an extent that Windows will no longer function properly. There is a procedure that removes the access icons for Internet explorer but not the program itself.

I would strongly suggest to not try and remove these processes and let one of our HJT experts with the gold shield work on the log file. The final result of trying to stop or remove these processes might facilitate having to do a clean installation of Windows so I would also suggest backing up all of your important data on the computer just to be on the safe side.
 

1 more replies
Answer Match 29.82%

when i ctrl+alt+del i see that the iexplore.exe and system are using all my cpu it seems that the system and browser processes are fighting each other
 

A:iexplore.exe and cpu 100%

10 more replies
Answer Match 29.82%

Hey there I hope someone can help!
 
I'm on windows 7 and I have multiple iexplore.exe *32 processes running in my task manager despite the fact I never use internet explorer!! 
 
I managed to disable the "invisible windows" and advert sounds it was making but the processes are still running and I'm worried. I'm hoping one of you geniuses will be able to help, I'm in need!

A:Please help with iexplore.exe

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

22 more replies
Answer Match 29.82%

My computer has multiple instances of iexplore.exe. I do not have any browsers open and i have scanned with hijacthis.

Any ideas of how to fix this would be very helpful
Jeremy
 

A:iexplore.exe

just terminate the iexplore.exe processes
 

2 more replies
Answer Match 29.82%

Hi,

I am in need of help. I have Windows 7 64 bit operating systems. I use Internet Explorer 9. When I click on internet explorer, I noticed the internet runs real slow and then it makes all of my other programs run real slowly. When I go to task manager and see my processes, I notice there is two iexplore.exe running in the background. One has about 6k of processing and the other about 60k. I try to kill the bigger one but it keeps coming back making internet explorer unbearable.

I have tried all kinds of anti-virus software (Microsoft security essentials, glary utilities, malware bytes, Super anti-spyware, wise disk cleaner). None have detected this issue. I have uninstall and reinstall Internet Explorer 9 and that did not help. I've also tried IE Reset and that did not help.

I have attached .dds and .attach as instructed. Please let me know what else you need.


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.10.2
Run by jpickens at 9:19:08 on 2013-01-10
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1791.654 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\syste... Read more

A:iexplore.exe help

Hello theluckyone5,

2 iexplore.exe's running is normal in Windows 7, please do not try to kill either one of them.

You didn't mention you also ran ComboFix. That log contains important information, kindly post the contents of the C:\Combofix.txt (do not attach it, post the contents directly into the reply window)

11 more replies
Answer Match 29.82%

Good day!I noticed when I am browsing the web that my window frequently gets out of line.What I mean is that my window gets un-selected and it causes me to worry since this has been the 4th time I have resorted to reformatting my drive.To add more pressure, this computer is a family desktop. Anyway, I always see in my Processes list that I have iexplore.exe running even though I'm using Firefox.Could anyone please help me find out if this is an infection or not so I can rest my mind off this. Thanks,Angelo

A:iexplore.exe

Most of the processes in Task Manager will be legitimate as shown in these links.List of common system processes found in XP's Task ManagerCommon system processes found in XP's Task ManagerTop System ProcessesDetermining whether a file is malware or a legitimate process sometimes depends on the location (path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a critical system file. However, it then places itself in a different location (folder) than where the legitimate file resides and runs from there. Another techinique is for the process to alter the registry and add itself as a Startup program so that it can run automatically each time the computer is booted. A file's properties may give a clue to identifying it. Right-click on the file, choose Properties and examine the General and Version tabs.Tools to investigate running processes and gather additional information to identify them and resolve problems:AnVir TaskManager FreeProcess ExplorerSystem ExplorerProcessHackerProcess MonitorsvchostViewerThese tools will provide information about each process, CPU usage, file description and its path location If you right-click on a file and select properties, you will see more details.Anytime you come across a suspicious file for which you cannot find any information about, the file has a legitimate name but is not located where it is supposed to be, or you want a second opinion, submit it to Jotti's virusscan or V... Read more

13 more replies
Answer Match 29.82%

I know what it is, however I have an issue with the fact that something keeps starting an instance of IE and then closing the application side leaving the process side running and hogging resources, now I do have some experiance with computers, and have run SB search and destroy and also have cleaned up with HJT however nothing I do seems to fix it. I have caught a few of the URLs before they pop the application they include such wonders as

http://88.80.7.66/153/in/htmlg11221...2&aid=10383&time=1122141242&fw=1088&v=153&m=0

and

http://b.skitodayplease.com/153/in/...2&aid=10383&time=1225946866&fw=1088&v=153&m=0

If you would like an HJT log posted let me know.
I appreciate the help.
 

A:Iexplore.exe

well after looking at somethings and using findawf here is the report

bak folders found
~~~~~~~~~~~
Directory of C:\PROGRA~1\DAEMON~1\BAK

11/12/2006 02:48 AM 157,592 daemon.exe
1 File(s) 157,592 bytes

Directory of C:\PROGRA~1\FREEDO~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\MSNMES~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\NETWAI~1\BAK

09/09/2003 11:24 PM 20,480 netWaiting.exe
1 File(s) 20,480 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

05/30/2006 08:24 AM 98,304 qttask.exe
1 File(s) 98,304 bytes

Directory of C:\PROGRA~1\SPYBOT~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\STEAM\BAK

09/01/2007 11:35 AM 1,266,936 steam.exe
1 File(s) 1,266,936 bytes

Directory of C:\WINDOWS\EHOME\BAK

09/29/2005 11:01 AM 67,584 ehtray.exe
1 File(s) 67,584 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

08/10/2004 02:00 AM 15,360 ctfmon.exe
01/13/2007 04:47 PM 163,840 hkcmd.exe
01/13/2007 04:46 PM 135,168 igfxpers.exe
01/13/2007 04:47 PM 131,072 igfxtray.exe
12/19/2005 05:08 AM 1,347,584 WLTRAY.exe
5 File(s) 1,793,024 bytes

Directory of C:\PROGRA~1\ALCOHO~1\ALCOHO~1\BAK

07/02/2007 02:27 AM 219,520 axcmd.exe
1 File(s) 219,520 bytes

Directory of C:\PROGRA~1\CREATIVE\MIXER\BAK

02/23/2005 12:57 PM 57,344 CTSVolFE.exe
1 File(s) 57,344 bytes

Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK

06/12/2007 02:16 PM 68,856 GoogleToolbarNotifier.exe
1 File(s) 68,856 bytes

Directory of C:\PROGRA~1\GOOGLE\GOOGLE~3\BAK

01/01/2007 01:22 PM 3,739,648 googletalk.exe
1 File(s) 3,739,... Read more

1 more replies
Answer Match 29.82%

i keep finding IEXPLORE.EXE running on my pc and it slows everything down. I dont know if its the same iexplore.exe file thats safe and thats why i am asking you nice guys for some help.

i have run virus checks and windows defence and they have not found anything but i dont know enough about it yet to tell if its safe.

The info on the net doesnt think the uppercase version is safe .. any light you could shed would be gratefully received

Many thanks yum yum

A:Iexplore.exe

Can you provide us with the location of the IEXPLORE.EXE file? Also, what version is it? If it's located in C:\Program Files\Internet Explorer (and the virus/malware scans show as clean) - then it's probably OK.

8 more replies
Answer Match 29.82%

I actually have three questions, but as all are about IE, I grouped them.

In the task manager, when I am running one copy of IE, there are 8+ processes called "iexplore.exe".
Why are they there, and how can I limit them?

The second point is this. Sometimes (usually after IE has been running a while), I open a new tab either normally or by middle-clicking a link, and instead of the new tab opening, it just says "Connecting..." and it NEVER OPENS !!! If I click it, it just freezes on the last screen. And, I can't close it! I can't middle-click close it, or right-click --> close it, or even press the X button to close it! I have to goto the processes list and close iexplore.exe. EVERY ONE OF THEM!!!

3rd question, I used to have IE search the internet by typing in the address bar, but now it doesn't work, just coming up with the
Internet Explorer can not display the webpage
error. I have changed it in Internet Options, but it searches once and then resets it!

A:IExplore.exe

Oops put it in wrong topic...

2 more replies
Answer Match 29.82%

I'll try to shorten the story. Been cluelessly(at least 90+ days) using my PC (XP - SP 3)putting up with CPU utilization taking off several times during each session. Decided to dig into it only to discover thru google searches that I'm not alone & the causes are probably bad.

Found iexplore.exe.#s.pf when doing file search + valid IE versions. would delete .pf file.........it would reappear after every PC/IE startup.

Had AVG 8.5 (free) running plus Malwarebytes(manual scans - that had caught stuff in the past). So ran both again - did not identify anything.

Started digging into various forum threads. Began taking action this am. Deleted AVG 8.5, removed MBAM, went into safe mode, deleted all temp files, cleaned up other parts of PC, reloaded MBAM/updated / full scan - nothing found, downloaded and ran SuperAntispyware (free)/full scan and it found some adware (15-cookies - had been using IE to get downloads) and Malware Installer Pkg/Gen (10 -all Dell Wild Tangent labeled files) - quarantined & removed. Downloaded HJT - ran it - saved log - remembered I had not checked the iexplore.exe file thing since awhile back - so I did - found an entry - with much earlier time stamp - deleted it - rebooted - ran HJT again - saved 2nd log - checked iexplore file again - has not reappeared. I'm running in safe mode with network right now. But have no idea if I really eliminated the threat via temp files or thru scans.

Thanks in advance for assistance & guidance
... Read more

A:Am I there Yet - iexplore.exe

iexplore.exe-***.pf is a normal file to find on a machine. It's a prefetch file. Leave it alone, please. It's causing you no harm.

HijackThis should only be used if one is certain of what one is doing. Additionally...

We no longer use HijackThis as our initial analysis tool. It does not provide enough detail for today's infections.

Should you still require assistance...

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.


All logs should be taken from Normal Mode.



Quote:




Deleted AVG 8.5




Make sure you've reinstalled an AntiVirus...MBAM and SAS are good at what they do, but are not AntiVirus.

1 more replies
Answer Match 29.82%

When I turn off or restart the computer. It tries to end task iexplore.exe, so I let it do its thing but it says iexplore.exe is unresponsive so I end task. But when I end task, the computer doesn't turn off or restart like I asked it too. If I try to turn it off or restart again, it tries to end task iexplore.exe. I'm basically stuck in a loop.

Logfile of HijackThis v1.99.1
Scan saved at 11:52:34 AM, on 10/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\progra~1\mcafee\MCAFEE~1\masalert.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
c:\progra~1\mcafee\mcafee antispyware\massrv.exe
c:\pr... Read more

A:iexplore.exe

7 more replies
Answer Match 29.82%

Hello folks, can somebody(s) please tell me if iexplore.exe/PID 5112 is a legitimate running process as it shows up when i run trojanhunter and it matches the default port of SoftWAR.100. trojan. Thanks in advance.
Bill.
 

A:iexplore.exe

16 more replies
Answer Match 29.82%

Hi guys,

I normally use Firefox but yesterday I had to go on a Korean site, whom Firefox can t run, consequently i used Internet Explorer but unfortunatly there was a virus in Iexplore.exe so I deleted it via AVG .
I ve been trying since to reinstall Internet explorer but it won t work i am getting the following message

"windows canno t find C:/Program files/Internet Explorer/Iexplore.exe. Make sure you type the name correctly, and then try again "

Would anyone know how to fix this issue.

Thanks in advance for any tips .
 

A:Iexplore.exe

16 more replies
Answer Match 29.82%

Hi!

I'm using Internet Explorer 8 and noticed that every once in a while a notification appears which says 'This tab has been recovered.'
So, I started Task Manager, and saw that there are more than 10 iexplore.exe processes running..
I also noticed that this notification about tab being recoverd appears when I'm not using IE at all..

One more thing..I had the same problem before, so i reinstalled the whole thing. Yesterday. I only installed what is necessary, and from trustworthy sites, so I have no idea, if it's a virus, how did I get it.

Any suggestions?
 

A:IE 8 and iexplore.exe

8 more replies
Answer Match 29.82%

I have this iexplore.exe on my WindowsXP . What is it and do I need it? What does it do??
HELP

Evon300
 

A:What is iexplore.exe????

iexplore.exe is MS Internet Explorer, if it is in the folder \Program Files\Internet Explorer. It is suspect if it is found in another folder.
 

1 more replies
Answer Match 29.82%

hi, i have multiple instances of iexplore.exe and msmsgs.exe running in my task manager even when i am not running them. each time i try to end the process tree they keep coming back, its slowing games down and i now have popups i've never been getting before. can anyone help?
 

A:iexplore.exe

Hi mazy

Welcome to TSG!

Please do this:

First create a permanent folder somewhere like in My Documents and name it Hijack This.

Now Click here to download Hijack This. Download it and click "Save". Save it to the Hijack This folder you just created.

Click on Hijackthis.exe to launch the program. Click on the Do a system scan and save a logfile button. It will scan and then ask you to save the log. Click "Save" to save the log file and then the log will open in notepad.

Click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

3 more replies
Answer Match 29.82%

Hello every one on board .............
I am a PC user with only hands on training. Recently I installed an internet cnnection on my p.c and since then it started running slow. There is a pop up message with a heading " iexplore.exe application error" the contents give out some number of file which could not be read. it asks to click OK to terminate. this happens everytime I close an internet window.

I am unable to do any work since the system is getting slower and slower. I have installed an AVG ANTIVIRUS which is not stopping the problem.

Please help me soon before my system crashes or I crash it to stop the endless waiting hours......


trydeep

A:Iexplore.exe

Welcome to BC. In order to determin your problem please list the files you appear to be missing. Which version of IE are you using? Which operating system? By any chance did you install the Yahoo toolbar?

1 more replies
Answer Match 29.82%

I believe this is my problem but can't be sure. Running xp service pack 3 with panda AV and FW 2008
Firewall was disabled for DDS to run. didn't want any potential interference.

DDS (Ver_09-03-16.01) - NTFSx86
Run by RIchard at 20:40:02.70 on Mon 03/16/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3327.2314 [GMT -7:00]

AV: Panda Antivirus + Firewall 2008 *On-access scanning enabled* (Updated)
FW: Panda Antivirus 2008 Personal Firewall *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
c:\program files\panda security\panda antivirus + fire... Read more

A:iexplore.exe

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

8 more replies
Answer Match 29.82%

hi guys
I m new in this forum ,my first prb is that some time before i delete some files from my pc , after the deleting the files ,i got a prb in my "set my home page"which is now disable and not working when i open the iexplorer its not able to configure home page .its open msn page ..now wat i should do in this situation.thnx in advance.
 

A:iexplore

You should be able to go to tools>internet options,then click on the general tab, just choose to use the current web page as my home page.

This of course means you have to go to the homepage you want first.

BTW, :wave: :wave: Welcome to TechSpot :wave: :wave:
 

3 more replies
Answer Match 29.82%

i keep having this process Iexplore.exe coming up and i end process it and it just respawns itself. help me please here is my hijackthis stuff


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Ventrilo\Ventrilo.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\secure.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_p...ount_id=137837
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_p...ount_id=137837
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\secure.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\secure.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\secure.html
R1 -... Read more

More replies
Answer Match 29.82%

Recently, my computers been running very slow and in the process, i've noticed that a file name: iexplore.exe has been taking up about 99% of my CPU and lots of memory. Please help me out.This is my HijackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:03:21 AM, on 7/17/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16441)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeG:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeG:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeG:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\CTsvcCDA.exeC:\WINDOWS\system32\gearsec.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\wscntfy.exeC:\ibmtools\aptezbtn\aptezbp.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeG:\Program Files\iTunes\iTunesHelper.exeG:\Program Files\Search Settings\SearchSettings.e... Read more

A:Iexplore.exe Cpu 100%

Hello and welcome to BCWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay. Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator priv... Read more

2 more replies
Answer Match 29.82%

Hey guys,

I have about 5 of t hese running in my task manager process. I know its something dodgey, cause when I try to end them, they just re-appear, any tips??

Cheers
?
 

A:iexplore.exe

7 more replies
Answer Match 29.82%

Windows XP Pro, Version 2002, Service Pack 3

My computer was/is infected with something. Internet explorer would shut down, sound ads would start playing when IE not even open. When I open the task manager it shows 2 iexplore.exe processes running when no IE windows are open. From my research I understand this can be an infection that is really hard to get rid of. I downloaded and ran: Malwarbytes, Trojan remover, Hitman Pro, Superantispyware, and Spybot S&D. All run in Safe mode and all found infections and cleaned them. Computer is running better now, but the 2 iexplore.exe processes are still running. I downloaded the free version of Prevx, and it says it found 2 medium risk infections: mcnavigation.ocx, and vbutilities.dll. It won't remove them until I buy the program, but I don't want to buy it if it isn't going the recognize and fix the main problem (assuming the 2 iexplore.exe processes are a problem). Any suggestions?

A:iexplore.exe

Hello and to BleepingComputer.Please try the following in Normal Mode. If you have Malwarebytes on your machine you do not need to download it again; just make sure it is updated. Additionally, please post for me the Malwarebytes logs where infections were found previously (found under the Logs tab).Please download RKill by Grinler from one of the 4 links below and save it to your desktop.Link 1Link 2Link 3Link 4Before we begin, you should disable any anti-malware software you have installed so it does not interfere with RKill running. This is because some anti-malware software mistakenly detects RKill as malicious. Please refer to this page if you are not sure how to disable your security software.Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed. If nothing happens or if the tool does not run, please let me know in your next reply***************************************************Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2IMPORTANT!!! - when you save the file, rename it to something random, such as bubbles.exe This must be done before beginning the download!MBAM may "make changes to your registry" as part of its disinfection routine. If ... Read more

10 more replies
Answer Match 29.82%

Problem signature:
Problem Event Name: APPCRASH
Application Name: iexplore.exe
Application Version: 8.0.7600.16385
Application Timestamp: 4a5bc69e
Fault Module Name: StackHash_0a9e
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000096
Exception Offset: 40ac5176
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

how do i fix this can anyone help?

A:iexplore.exe

Welcome

How to Fix Appcrash Errors on a Computer | eHow.com

Keep us posted. Let us know how you made out.

2 more replies
Answer Match 29.82%

Having some problems with my compter slowing way down usually when im online. My Iexplore.exe process jumps up to approx 160,000 k and of course that brings my CPU usage way up. I have tryed using pandas online scan and it didnt find anything as well as Norton and Ad-Aware, all up to date. Heres my logfile.


Logfile of HijackThis v1.99.1
Scan saved at 7:51:40 PM, on 12/14/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Fi... Read more

A:Iexplore.exe

Your log appears clean but let's get a 2nd opinion..

Download and install Ewido Security SuiteWhen installing, under "Additional Options",uncheck - Install background guard

Have Ewido update itself & then exit the program.
If you are having problems with the updater, you can use this link to manually update Ewido
* * * * * * RESTART WINDOWS IN SAFE MODE * * * * * * * * * *
1. Restart your computer
2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3. Instead of Windows loading as normal, a menu should appear
4. Select the option to run Windows in Safe Mode.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
** Please disable all other antivirus programs before proceeding.**

Run Ewido:Click Scanner
Click Complete System Scan to begin scanning.
Click OK when prompted to clean files
With the first file it prompts to clean, select the option - "Perform action on all infections" - & choose clean and click OK
Once finished, click the Save report button
Save the report to your desktop
Close Ewido
* Ewido scan would require at least an hour. I suggest that you go grab a cup of coffee & do something else while you wait for it to complete.

Post Ewido's report in your next reply

5 more replies
Answer Match 29.82%

hello I have a problem with my computer. I do not use Ie anymore, I use Mozilla but in Task manager appears Iexplore.exe with 99% and the computer is running very slow. I use adware and Symantec.

please help

Here is a HijackThis log, done in normal mode

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:33:32 PM, on 10/9/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files... Read more

A:Iexplore 99% CPU

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 29.82%

Hi
Can anyone advise why, in my task manager, I have 2 processes of IEXPLORE.EXE running.
One has at the moment, with only BleepingComputer open, a memory usage of 12268 and one of 41940.
Is this correct ?

Many Thanks
David Cowling

A:IEXPLORE.EXE

That's Internet Explorer. How many pages do you have open? Two per chance?

7 more replies
Answer Match 29.82%

I have tried everything I can to get rid of this beast. It keeps coming back...here are my logs...thanks and No, Iam not using Internet Explorer...I haven't even opened IE in 2 years at least.DDS log.DDS (Ver_11-05-19.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21Run by Admin1 at 11:42:34 on 2011-05-21Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2039.1361 [GMT -5:00].AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}.============== Running Processes ===============.C:\WINDOWS\system32\svchost.exe -k DcomLaunchC:\WINDOWS\system32\svchost.exe -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exesvchost.exesvchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Dokan\DokanLibrary\mounter.exeC:\WINDOWS\system32\svchost.exe -k HPServiceC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Jungle Disk Desktop\JungleDiskMonitor.exeC:\WINDOWS\System32... Read more

A:IEXPLORE.exe

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that ... Read more

17 more replies
Answer Match 29.82%

My computer started being slow out of nowhere earlier when I opened up an online game. I closed the game, restarted computer, fixed internet connection, and no success. I looked at task manager and saw two iexplore.exe and one is taking 50% cpu. I took a hijackthis log to upload. I never do virus scans or defragment my computer because it always freezes but I never have problems. Please help.

A:Two Iexplore.exe

Hi and welcome.Sorry for delay.If you still need assistance please post a fresh hijackthis log here.Grab me a log from this app too please:Download this tool to your desktop: http://www.uploads.ejvindh.net/rootchk.exe Run the program. After a short time a logfile will turn up. Copy the contents of the log into the thread.Thanks

1 more replies
Answer Match 29.82%

Vista Advent 5302
Laptop boots up at normal speed, wallpaper and icons and task bar all ok THEN VIRTUALLY COMES TO STANDSTILL.

Have started in safe mode, tried to run chkdsk, system restore to no avail. Am now in safe mode.
Task manager showing little CPU usage 3%, but Processes showing 3 IEXPLORE.EXE, each one running at approx 50000kb, also had error code 0x80041161 WLM could not be started etc

I havn't installed/removed any software/hardware lately, was working previous day with no problems.
Also looked in Event Log at todays date :
Source: SidebySide ID:33 Log:None (This appears 7 times)
Source: Event System ID:4609 Log:Event

Copy of Hijack this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:43:50, on 02/04/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\User\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.thetechguys.com/welcome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.mi... Read more

A:iexplore.exe HELP

After googling away, realised that iexplore.exe does tend to run in background as you browse away.

Forgot to say that I initially got BSOD when it first started to play up, but was unable to get stop error code.
I am unable, even in safe mode, to get into Windows Live Mail, get the following error

WLM 0x80041161
Could not be started. It may be installed incorrectly.
Is disk full - Is memory full

Have loads of free disk space and memory so not sure whats happening there.
Really don't like WLM, keeps changing with nearly every update.
 

1 more replies
Answer Match 29.82%

I have a PC without internet acess which I suspect has or had the iexplore.exe virus.
It is running WinXP
I have disabled internet explorer in the Set Program Access and Defaults area of Add or Remove Programs in Control Panel.
Now Firefox is the only browser left (although it too is apparently damaged)

Can I assume that the ieplore.exe virus must also have been disabled (since the virus was using IE to inflict damage) and that any remaining problems (which there are ) are most probably down to another source or maybe just residual damage caused by the iexplore .exe virus?
I am hesitating between getting the PC serviced or just running a complete reinstal/reformatl of the system
 

More replies
Answer Match 29.82%

Hello!

I have been having problems... Everytime I'm running Internet explorer 8 I keep getting messages telling me my virtual memory is low.

I started the task manager and looked under process, found 3 diffrent logs there for iexplore. They seem to go away when I close the browser but reappear when the browser is opened again.. Any ideas?

A:iexplore

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

4 more replies