TechSpot

Iexplore.exe, I suspect virus or malware

By neowing
Oct 29, 2009
Topic Status:
Not open for further replies.
  1. Hello ? Techspot,

    I recently changed internet connection: dial service into High speed internet.
    Anyway, my problem is, when I clicked "Turn off computer" in Start menu, suddenly, computer is crashing and showed the message that "explore.exe" has a problem: It must be close to prevent malware and virus damage.

    So I clicked. Next, the icons in the background suddenly disappear but it came back.
    After that I re- "Turn off computer" again and the computer shut down.
    This problem occurs continue from October to today,

    ----------------------
    Add Information:
    ----------------------

    After several research for my problem, I might think this is not the right section because I can't really figure out this is virus or just system problem even if the warning message showed up my screen.

    I will attach jpg link when I go back home: the problems continue to showing when I try to shut down the computer.

    Sorry for mis-reading information.

    From
    neowing.
     

    Attached Files:

  2. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

    Hello ? Techspot.
    I think I mis-read the information.
    My problem is NOT "Iexplore.exe", correct one is "explore.exe"

    And I also want to moderator to move my thread into "Windows" Section.
    Once again, I am sorry for mis-read the information.
     
  3. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

  4. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

    Thank you for replying, kimsland.
    I am confusing about 1st step.
    I don't have IE7 but I have IE6. Should I skip it ?

    from
    neowing
     
  5. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Well quoting MS from here: http://support.microsoft.com/kb/318378
    Actually which Service Pack are you running? XP SP...?
    XP is up to SP3 and is working well
    For the moment you can skip IE6 Reset (IE6 doesn't even have Tabs, its very old now)
     
  6. kritius

    kritius TS Guru Posts: 2,087

    Kimsland,

     
  7. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

  8. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Thanks neowing

    Your log removed a couple of malwares that were likely downloaded with BitComet (BitTorrent Download Client)
    Has this program now been fully removed/uninstalled ?
    Filesharing applications are generally the most common applications that allow Malware to come into your computer

    As it has been a week since your first scan with Malwarbytes
    You will need to startup Malwarebytes again and run another quick scan (removing any found Malware as the end of the scan

    Assuming you have now also updated Internet Explorer and also run a Reset on it
    And updated any further outstanding Windows Security updates (there will be some from updating Internet Explorer, and there were a few MS updates in the last week as well)

    You can also now uninstall SUPERAntispyware and reduce any further not required Startups (including visiting Add/Remove Programs and uninstalling not required programs)

    Also referring to This Guide, remove all System Restore points
    Then Restart and provide a fresh HJT scan and attach it to a new reply

    Generally how is it performing now?
    Are you still receiving "crashing" and "warning messages"
     
  9. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

  10. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    So sorry you had to go through all of that! I checked the images- mostly a waste of your time because they are copies of error reports to send to Microsoft.

    The best way to find the cause of unexplained error like crashes and freezes- that will help find the cause and lead to resolution is to check the computer clock at time of event, then use Event Viewer to look for corresponding Error:

    Start> Run> type in eventvwr

    Do this on each the System and the Applications logs:
    [1]. Click to open the log>
    [2]. Look for the Error>
    [3] .Right click on the Error> Properties>
    [4]. Click on Copy button, top right, below the down arrow >
    [5]. Paste here (Ctrl V)
    [6].NOTES
    • You can ignore Warnings and Information Events.
    • If you have a recurring Error with same ID#, same Source and same Description, only one copy is needed.
    • You don't need to include the lines of code in the box below the Description, if any.
    • Please do not copy the entire Event log.

    Errors are time coded. Check the computer clock on freeze or crash.

    The Malwarebytes and Superantispyware logs were clean. I didn't check the first HijackThis log, but the second one is clean. Go ahead and check for the Errors while I finish checking the Combofix report- will meet you back here in a bit.

    Tip: one reason for unexplained explore/exe crashes is if the hidden files and folders are showing:

    Control Panel> Folder Options> View tab> UNCHECK 'shows hidden files and folders' (if checked)> Apply> OK.
     
  11. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

    I had been errors from middle of October and Now.
    There are too many errors.
    I just choose very recently log.

    Below is the error log:

    View attachment 53323


    From
    neowing.
     
     
  12. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Have you got a PCI-Express Video card installed?
    If so uninstall (physically remove) the card, and boot off the onboard Video (that hopefully exists)
    If this works, then uninstall all Video drivers, then shutdown and refit your addon Video card
    Then download the most up to date drivers again
     
  13. kritius

    kritius TS Guru Posts: 2,087

    Please download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1
    Download Mirror #2

    • Double-click SystemLook.exe to run it.
    • Copy the content of the following codebox into the main textfield:
      Code:
      :filefind
      *atapi.sys
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
    Note: The log can also be found on your Desktop entitled SystemLook.txt
     
  14. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

  15. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

    I just have a new question regarding my infaction.

    Currently, I have a folder that can't delete by regular method and "unlocker"
    Is that part of Virus Infaction ?

    Also, my computer still continuing the same problem that I mentioned when I started my thread.
    But this time, when that problem occur, I restart (rebooting the computer) the windows and suddenly it asked me to choose 2 option: 1 is go back windows, other one is go to dos mod(?) or Protect mode (Not sure).

    I am worrying if my hard drive will die: How do I check the condition of my hard drive ?
    Do you think I should buy New Hard drive ? or wait more day to moderator's special instruction of remove the problem ? (I know everyone is busy to help others if I made you angry, sorry. I didn't mean I want to make you angry)

    from
    neowing.
     
  16. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Do you have an addon Video card installed?
    What is your computer Make and Model number?
     
  17. neowing

    neowing TS Enthusiast Topic Starter Posts: 247

    My computer was used to be gateway computer but I changed everything.
    So, this is custom build computer.

    Video card is "PNY- NVidia GeForce 8600 GT"
    That is the only one video card installed in my computer.

    From
    neowing.
     
  18. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    I'd remove it
    Blow out all internal dust (ideally with high pressurized air can)
    Also blow out the Video card
    Then re-mount it
    Test if you still get "crashing" issues after that
    I'm pretty sure its hardware related, but best to confirm no Malware etc (as you have already done)
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.