TechSpot

Multiple IEXPLORE.EXE in Task Mnager

By Bluntman420
Feb 13, 2007
  1. Hey I've noticed lately that i have multiple iexplore.exe running on my task manager. ive gone on google and searched extensivley on trying to fix this. I've tried a squared, avg anti-spyware, bazooka scanner, avg virus, spybot S&D, and adaware but all scans come up clean but i know their is still something in their. Here is my hijack this log, pls neone know whats wrong
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

    If after reading the above, you wish to clean your system, do the following.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT, Combofix and AVG Antispyware logs as attachments into this thread, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    Log Files

    TY howard for replying i have done evry thing in the post that u had asked me to do . The logs are attached. pls help me fix this problem
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

    Delete all files in AVG Antispyware quarantine.

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    IEXPLORER.EXE<Not to be confused with iexplore.exe
    32 eq bows.exe

    Close task manager.

    Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: CVirtualDNSObj Object - {86C510E9-97EF-4749-914F-0280247BE3A6} - C:\WINDOWS\VirtualDNS.dll (file missing)

    O4 - HKCU\..\Run: [TESTAMEN] C:\DOCUME~1\COMPAQ~1\APPLIC~1\gram htm\32 eq bows.exe

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\DOCUME~1\COMPAQ~1\APPLIC~1\gram htm<Delete the entire folder.
    C:\PROGRA~1\INTERN~1\IEXPLORER.EXE

    Reboot into normal mode and rehide your protected OS files.

    Post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    i did what u said and here is the new log file
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Well done, your HJT log is now clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  7. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    Ty very much it has stopped appeaing in my task manager u are a genius and will tell everyone i know that has problems to go here because u obviously know what u are doing. I hve one other question for you when i ran my avg virus scan some dll files came up saying that they need to be changed but im not sure how to change them the files are
    1.kernel32.dll
    2.user32.dll
    3.shell32.dll
    4.ntoskrnl.exe
    5.hosts
    dont know if im paranoid or they need to be chnaged
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Mmm, that`s strange. Are you sure AVG didn`t say they had been changed?

    Run this online scanner and let me know the results. You will need to use Internet Explorer for the scan.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  9. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    i tried running the scan 5 times. it starts fine runs but then then when their is like 30 mins left it stops and closes automatically.
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Even stranger.

    Try this online scanner instead.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  11. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    i tried to install .cab file but norton internet security eroor popped up but i dont understand why becasue i got rid of norton as soon as i got the comp
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Please post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  13. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    here is new hjt log
     
  14. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I hadn`t noticed before, but your Symantec/norton programme is running along side AVG.

    This is definitely not recommended, will slow your system down and can cause serious conflicts.

    Go and read this thread HERE and see if it helps to get rid of Symantec/Norton crapware.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  15. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    hey that norton removal software wroked like a charm her is the report of that online scan. AShould i delete these files???

    It seems every different scan i do something different comes up

    lol forgot to attach report
     
  16. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.


    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    Process.exe

    Close task manager.

    Locate and delete the following bold files and/or directories(if there).

    C:\WINDOWS\system32\Process.exe

    Reboot into normal mode.

    Check to make sure the above file has gone. If it has, I think, you`re good to go.

    Rehide your protected OS files.

    The above was the only nasty entry in your scan log. The others are just tracking cookies and a Combofix file.

    Go HERE and follow the instructions for running the Ccleaner programme.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  17. Bluntman420

    Bluntman420 TS Rookie Topic Starter

    everything working fine :) TY very much for being so kind and helping me with my problem.
     
  18. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    No problem mate, it was my pleasure.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of Bluntman420 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...