Help - Multiple iexplore processes using 100% cpu but iexplore not running

[robnye]

Help......

I noticed the other day that I had started to get popup windows, seeing that some of the windows had CID: I tried to remove it, by doing full scans of
spybot
adaware
superantispyware
malwarebytes
avg antivirus
removing/deleting all dodgy processes/files found

but the popups didnt go away, I then checked in task manager and noticed several iexplore processes and that the pc was running at 100% cpu usage,
so I tried rebooting into safe mode and redoing the scans
again clearing out any dodgy processes reported on.
when I booted up normal, the iexplore processes were there, one process started to eat up the available memory.

I did manage to kill all of them of and the pc ran as normal until it was rebooted

having read the sticky thread regarding first steps to take to clear and the problem is still there...

hence why I am raising this thread
and log files attached as requested

nb: the other odd thing is that my avg antirus doesnt seem to be updating automatically........! I have to do it manually

 

[kimsland]

I'm not normally a HJT log reader, but these entries should be ticked and removed:

O4 - HKLM\..\Run: [Stupid Data Dart Wave] C:\Documents and Settings\All Users\Application Data\flag ace stupid data\bike wait.exe

O4 - HKCU\..\Run: [comp joy] C:\DOCUME~1\Owner\APPLIC~1\CLOCKB~1\ONETHAT.exe

 

[robnye]

thank you , that has killed off the iexplore processes......

would be nice if any spotted anything else in the hijack log, that needs tidying up

 

[LookinAround]

There's at least one thing i see you probably don't need started on your Desktop.... with each and every startup.. the process igfxtray.exe


And here's a good place to start learning how to find/identify/control all those extra startups. Visit Pacman's Portal and click on startups. They provide the tutorial plus the tools plus the information you'll need about processes in their database. And it's all very useful stuff to know going forward.

Oh.. and you can look up and see just what igfxtray.exe is when you get there

 

[rf6647]

Suspicious entry - Common Name does not correspond to filename; path to executable does not conform to expecttions.

O4 - HKLM\..\Run: [USB Storage Toolbox] VTTimer.exe

Debate - no clear evidence that it is harmful.
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe

Control Panel > add/remove program - likely will not remove program.
Drill here to find program removal instructions.
http://www.sky.com/skybybroadband/articles/article04
Link is redirected/broken.