I have two iexplore.exe processes which i can't remove

By castroguevara
Mar 14, 2007
  1. please help me remove them...
  2. kitty500cat

    kitty500cat TS Evangelist Posts: 2,154   +6

    Hello and welcome to TechSpot.

    It looks like you might have a lop infection.

    Please Download NoLop to your desktop from one of the links below...

    First close any other programs you have running as this will require a reboot
    Double click NoLop.exe to run it
    Now click the button labelled "Search and Destroy"
    <<your computer will now be scanned for infected files>>
    When scanning is finished you will be prompted to reboot only if infected, Click OK
    Now click the "REBOOT" Button.
    A Message should popup from NoLop.
    If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log along with a fresh HJT log

    --If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program.-- http://www.boletrice.com/downloads/mscomctl.ocx

    Now have HJT fix these entries:

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKLM\..\Run: [itch type 16 team] C:\Documents and Settings\All Users\Application Data\cake soft itch type\book bags.exe

    O4 - HKCU\..\Run: [road draw] C:\DOCUME~1\WAIHUN~1\APPLIC~1\FORDER~1\DVD OPTION START.exe

    Now go into C:\Documents and Settings\%your user name%\application data\forder~1 and delete DVD OPTION START.exe.

    Go into C:\Documents and Settings\All Users\Application Data and delete the folder cake soft itch type.

    Now read the Viruses/spyware/malware, preliminary removal instructions. Follow all the instructions to the letter, then post fresh HJT, Combofix, and AVG Antispyware logs as attachments into this thread. Also post here the results of the AVG Antirootkit scan.

    Regards :)

    This thread is for the use of castroguevara only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in the Security and the Web forum.
  3. castroguevara

    castroguevara TS Rookie Topic Starter

    hey thanks for the quick reply.

    i used hijack and fixed the items, but i was unable to delete the 'cake soft itch type' folder. it said that it was being used by another program, what shall i do?
  4. kitty500cat

    kitty500cat TS Evangelist Posts: 2,154   +6

    Boot into safe mode, under your normal user name (not the administrator account). See how here. Then try fixing/deleting those items that you were unable to fix before.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...