IEXPLORE.EXE Problem

Discussion in 'malware problems & news' started by heartsfan, Oct 14, 2007.

Thread Status:
Not open for further replies.
  1. heartsfan

    heartsfan Registered Member

    Joined:
    Oct 14, 2007
    Posts:
    2
    On my Task Manager I have the process IEXPLORE.EXE (I know this is Internet Explorer .... but I don't have this running) - If I End Task it will kill it then it will reappear in about 2 seconds!!!

    I have searched my PC for IEXPLORE.EXE and I only have one ... at the usual place of C:\Program Files\Internet Explorer

    I even tried moving this file but a new one just appears in this folder!!

    I have searched the net for this problem but I have found nothing that helps.

    I have scanned using:

    Nod32 Antivirus
    AdAware
    AVG Anti-Spyware
    Spybot S&D
    MS Malicious Software Tool
    Trojan Hunter

    But alas ... NOTHING is found!!!

    I also have SpywareBlaster.

    I have checked Services but nothing in there that shouldn't be running .... also checked startup programs but again nothing in there that shouldn't be running!!!!

    Anyone have any ideas whats going on ..... I am pulling my hair out!!!
     
  2. Metting

    Metting Registered Member

    Joined:
    Aug 3, 2006
    Posts:
    100
    Most probably you have a Trojan which hijacked iexplorer.exe and launched it to connect to Internet.

    Whenever you kill iexplorer.exe the Trojan will restart it again.

    One of the most famous Trojans which do this is "Biforse" family.
    Some members of Biforse family use a hidden processes "rootkit behavior"

    I recommend a full scan with SuperAntispyware
    www.superantispyware.com

    If nothing found I recommend Rootkit Scanners
    Also Unhackme may help in this matter.
     
  3. Perman

    Perman Registered Member

    Joined:
    Nov 23, 2005
    Posts:
    2,160
    Hi, folks: In addition to Metting's suggestion, you may want to try BoClean, the reason being; You have TH and AVG AS, both's scanners failed to detect this trojan, how about their real time guards ? BoClean's memory scanner will detect any trojan's execution and hopefully stops it right there. Did your FW's application control and its outbound control alert you anything ? Good luck.
     
  4. heartsfan

    heartsfan Registered Member

    Joined:
    Oct 14, 2007
    Posts:
    2
    Thanks Metting!

    Unhackme done the trick - it cleared a file in C:\Windows called vchost.exe

    And the iexplore.exe is gone.:thumb:
     
  5. Metting

    Metting Registered Member

    Joined:
    Aug 3, 2006
    Posts:
    100
    Congratulations :)

    Just to satisfy my curiosity did you scan with SuperAntiSpyware ?

    If yes, did it find any thing ?
     
  6. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Nice advice Metting!
    BTW I have sent u a PM.
     
Loading...
Thread Status:
Not open for further replies.