Hello, I would greatly appreciate any advice on what to do next. I went through the 8 steps but gmer.exe (not named this) would only scan services, registry, and files while all other choices were greyed out.
Inactive Two iexplore.exe *32 processes running in task manager
- Thread starter ajjgreenia
- Start date
- Status
Bobbye
Posts: 16,313 +36
Welcome to TechSpot! I'm checking your logs now.
In the meantime, Please do not use any other cleaning programs or scans while I'm helping you, unless I direct you to. Do not use a Registry cleaner or make any changes in the Registry.
Edit: GMER doesn't work on 64bit operating systems, not does HijackThis. FYI, 2 or more running iexplore.ese processes are normal in IE8. But they an also be malware. Do you notice any other problems with the system? Mbam removed multiple MyWebSearch entries.
Please run this online virus scan to see if anything gets picked up:
Run Eset NOD32 Online AntiVirus scan HEREhttp://www.eset.eu/online-scanner
In the meantime, Please do not use any other cleaning programs or scans while I'm helping you, unless I direct you to. Do not use a Registry cleaner or make any changes in the Registry.
Edit: GMER doesn't work on 64bit operating systems, not does HijackThis. FYI, 2 or more running iexplore.ese processes are normal in IE8. But they an also be malware. Do you notice any other problems with the system? Mbam removed multiple MyWebSearch entries.
Please run this online virus scan to see if anything gets picked up:
Run Eset NOD32 Online AntiVirus scan HEREhttp://www.eset.eu/online-scanner
- Tick the box next to YES, I accept the Terms of Use.
- Click Start
- When asked, allow the Active X control to install
- Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
- Click Start
- Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
- Click Scan
- Wait for the scan to finish
- Re-enable your Antivirus software.
- A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.
ok i have serious problems
First off, thanks for reply . bank account was zeroed out today and after spending some time with bank found out card # taken and used for 33 charges last 2 to 3 days. Anyway i got it taken care with bank. long day. I tried to run online virus program 5 times and it kept getting stuck at 44%. I have never seen the double instance of iexplore.exe *32 until couple days ago and norton has been "blocking" numerous attempts to access computer. I will try to post norton recent history
First off, thanks for reply . bank account was zeroed out today and after spending some time with bank found out card # taken and used for 33 charges last 2 to 3 days. Anyway i got it taken care with bank. long day. I tried to run online virus program 5 times and it kept getting stuck at 44%. I have never seen the double instance of iexplore.exe *32 until couple days ago and norton has been "blocking" numerous attempts to access computer. I will try to post norton recent history
norton recent log
seems like norton is doing something all the time
also I noticed windows hasnt had an update since 8/12
even though it checked today
seems like norton is doing something all the time
also I noticed windows hasnt had an update since 8/12
even though it checked today
Bobbye
Posts: 16,313 +36
You're going to have to take up this issue with Norton. The only 2 things I can make out from that log are:
1. Teredo Tunneling Pseudo-Interface>> http://technet.microsoft.com/en-us/network/cc917486.aspx
2. IP 159.148.117.21, 80",ergoprotect.in/plugins
netname: LVDATSSIA
descr: LV Dats SIA
country: LV
If it's blocking incoming access to your computer from this IP, it's a good thing and what you have a firewall to do.
There are Java related entries indicating possible exploit- the Java cache should be emptied.
In your bank comment, do you mean there was 30 something unauthorized withdrawals? If that is the case, I strongly recommend you reformat/reinstall. If the banking was penetrated, so were all of your passwords and other personal information.
1. Teredo Tunneling Pseudo-Interface>> http://technet.microsoft.com/en-us/network/cc917486.aspx
2. IP 159.148.117.21, 80",ergoprotect.in/plugins
netname: LVDATSSIA
descr: LV Dats SIA
country: LV
If it's blocking incoming access to your computer from this IP, it's a good thing and what you have a firewall to do.
There are Java related entries indicating possible exploit- the Java cache should be emptied.
In your bank comment, do you mean there was 30 something unauthorized withdrawals? If that is the case, I strongly recommend you reformat/reinstall. If the banking was penetrated, so were all of your passwords and other personal information.
hello
it was credit card info that was used for skype and itunes
I have no disk whatsoever for this laptop, it came preloaded with vista home
so a reformat is out . I updated my java but was wondering how to get rid of the iexplore.exe *32 problem. On other posts people seemed to be able to fix it.
it was credit card info that was used for skype and itunes
I have no disk whatsoever for this laptop, it came preloaded with vista home
so a reformat is out . I updated my java but was wondering how to get rid of the iexplore.exe *32 problem. On other posts people seemed to be able to fix it.
Bobbye
Posts: 16,313 +36
First, you need to understand that it is normal to see multiple iexplore.exe entries with IE8.
Second, others are able to fix it only if malware is hiding in one of those entries and it is found and removed.
Unfortunately, this is a redundancy that is a built-in tab recovery feature in IE8 so that if one tab crashes in IE8, it's not suppose to crash all of IE8 and allow you to still use IE8 and the other opened tabs.
I'll check the logs you left to see if any malware shows up, then we can go from there. Do you not have a Recovery Console on the system or even a Recovery disc?
Bobbye
Posts: 16,313 +36
Due to inactivity, this thread is being closed. If you need it reopened, please send a PM to your helper and include the URL of the thread: https://www.techspot.com/vb/topic152566.html
- Status
Similar threads
Latest posts
-
Sony's Ghost of Tsushima brings familiar PlayStation features to PC- Burty117 replied
-
Google is cracking down on third-party apps that block YouTube ads- Underdog replied
-
Nintendo emulator Delta lands on the Apple App Store, now the top free app- Shawn Knight replied
-
Samsung's 2024 TV lineup receives a new 98-inch model for $3,999- Squid Surprise replied
-
The Best 4K Gaming Monitors: OLED Wins- Lew Zealand replied