2 iexplore.exe processes running

[burrlappin]

i noticed this morning 2 iexplore.exe processes running in the task manager... also noticed my computer lagging a bit at times. i followed the 8 step plan and still have the same problem. how do i fix it?

 

[gguerra]

This is a pesky virus. Someone here at work had it and I did multiple things and finally got rid of it.
There are too many things to mention to try so I will just give you a link.. http://www.neuber.com/taskmanager/process/iexplore.exe.html.. I do know that I uninstalled the Yahoo toolbar and that helped. (If you have it installed). First thing to do is start using another browser and manually end the process iexplore

 

[touch]

Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe
And save to the desktop.

Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::
Folder::
C:\Program Files\Common

http://www.fromsej.saknet.dk/billeder/cfscript.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

 

[burrlappin]

thank you both.... i have been searching forums all day and i stumbled onto at least one that said the 2 iexplore.exe's are normal for IE8 due to "multithreading"?

is that the case? i know it JUST started recently, and i "upgraded" to IE8 over the weekend, i figured this was all caused from that download either due to compatability issues or something attached to the file itself, i hadn't thought that it would be an actual "benefit" of IE8....

oh, toolbars, i only use the command, status, and menu bars... nothing outside of that, and to my knowledge haven't downloaded or installed anything else, though i do see the option to use yahoo's toolbar under my views tab, how would i go about uninstalling it?

anyway, i'll be back with the combofix log in a moment.

 

[burrlappin]

heres the log,

i would like to mention that i did have a few p2p programs and i removed them as suggested in step 4, via add/remove programs, however i still see them mentioned on the log... is that normal?

 

[burrlappin]

okay, i'm dumb... i failed to watch that little animation.

i have now and reran combofix the way shown... here's the new log.

 

[touch]

Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::
Folder::
c:\program files\Azureus
c:\program files\BitTorrent
Filelook::
J:\start.exe

http://www.fromsej.saknet.dk/billeder/cfscript.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

 

[burrlappin]

well, after my last posts i went ahead and manually cleaned up the 2 empty folders... but i still ran a scan to see if anything came back, it doesn't appear so. hope i didn't mess things up, the folders were empty.

 

[touch]

No, that´s okay.

The log looks clean.

Download the Norton Removal Tool (SymNRT) to your Desktop.


http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

Once downloaded please close ALL open browsers, also save any work because this may require a restart.

Go to your desktop and double click on the removal tool and then click Setup.
Once open Click Next
Accept the license agreement and click Next
Type in the letters/numbers that you see into the text box then click Next.
Then click Next and the tool will start running.
Once finished restart the PC and run the tool again to ensure everything has been removed.
Delete Nortonremoval tool from your Desktop.

Please attach fresh hijackthis log, and tell how things are running

 

[burrlappin]

thank you again for all your help.

well there are still 2 instances of iexplore.exe in the taskmanager and though it does seem smoother its still a bit slower than it was last week... and it is still hanging up at times, i'm really thinking it's IE8 at this point. at some point through all this searching i came across a chart listing the specs for all the different browsers (speed, memory usage, compatabilty, etc.), was that here somewhere?

 

[touch]

It is probably IE8 there are the cause ->

Download: DelDomains.inf
http://mvps.org/winhelp2002/DelDomains.inf,
and save it to the desktop.

Close all open browsers
Right-click on DelDomains.inf and select: Install

Reboot, and tell if there any improvement ?

 

[burrlappin]

well startup goes alot faster, but aside from that nothing really different still 2 iexplore.exe's... if this is all IE8, could you maybe suggest a new browser based on my comp specs? thank you.

 

[touch]

I´ll suggest Firefox:
http://www.mozilla.com/en-US/firefox/all.html

Or a rollback to IE7 ->
"Close all programs.
Click Start, and then click Control Panel.
Click Add or Remove Programs.
In the list of currently installed programs, click Windows Internet Explorer 8, and then click Remove."

Reboot.