Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: please help 2 iexplore.exe in task manager?  (Read 6091 times)

0 Members and 1 Guest are viewing this topic.

stephified

    Topic Starter


    Greenhorn

    please help 2 iexplore.exe in task manager?
    « on: September 05, 2010, 05:47:34 PM »
    I've been having problems with my PC for over one month now. Had a few Trojan viruses that I thought I was rid of but am still having problems. System is very slow upon start-up, riddled with tracking cookies, IE sometimes freezes for no reason, and also find 2 iexplore.exe running in task manager. Scans on various anti malware/spyware/virus software turn-up nothing.

    Please help.

    Thank you.

    S.

    [recovering disk space - old attachment deleted by admin]

    CBMatt

    • Mod & Malware Specialist


    • Prodigy

    • Sad and lonely...and loving every minute of it.
    • Thanked: 167
      • Yes
    • Experience: Experienced
    • OS: Windows 7
    Re: please help 2 iexplore.exe in task manager?
    « Reply #1 on: September 05, 2010, 06:07:23 PM »
    iexplore.exe is Internet Explorer.  If you have more than one browser window open, it will show up in Task Manager more than once.  Also, tracking cookies are basically harmless.  You do, however, have an infection which might be causing your problems.



    Download ComboFix by sUBs from one of the below links. Be sure top save it to the Desktop.

    Link #1
    Link #2

    **Note:  It is important that it is saved directly to your Desktop

    Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.

    Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
     
    Double click combofix.exe & follow the prompts.

    For Windows XP Systems install the Recovery Console:

    - If you are using Windows XP and do not already have the Recovery Console installed, please ensure your Internet connection is active (if possible) and click Yes.
    - If for some reason your Internet is not working click No.
    - If you are not using Windows XP, you will not be prompted.
    - When prompted to accept the EULA click OK.
    - Accept Microsoft's EULA (Click Yes).
    - When you are told that the RC is installed correctly click YES to continue scanning for malware.

    When finished ComboFix will produce a log for you.
    Post the ComboFix log and a new HijackThis log in your next reply.

    Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

    Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.
    Quote
    An undefined problem has an infinite number of solutions.
    —Robert A. Humphrey

    stephified

      Topic Starter


      Greenhorn

      Re: please help 2 iexplore.exe in task manager?
      « Reply #2 on: September 06, 2010, 10:21:20 AM »
      Ran ComboFix.exe as directed. Please find logs attached.


      [recovering disk space - old attachment deleted by admin]

      BC_Programmer


        Mastermind
      • Typing is no substitute for thinking.
      • Thanked: 1140
        • Yes
        • Yes
        • BC-Programming.com
      • Certifications: List
      • Computer: Specs
      • Experience: Beginner
      • OS: Windows 11
      Re: please help 2 iexplore.exe in task manager?
      « Reply #3 on: September 06, 2010, 01:33:34 PM »

      Quote
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Internet Explorer 8 shows two processes by design.
      I was trying to dereference Null Pointers before it was cool.

      CBMatt

      • Mod & Malware Specialist


      • Prodigy

      • Sad and lonely...and loving every minute of it.
      • Thanked: 167
        • Yes
      • Experience: Experienced
      • OS: Windows 7
      Re: please help 2 iexplore.exe in task manager?
      « Reply #4 on: September 07, 2010, 04:32:45 AM »
      Yes, that is a good point.

      stephified, please follow the below steps:

      • Close any open browsers.
      • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Open notepad and copy/paste the text in the codebox below into it:
      Code: [Select]
      KillAll::
      File::
      C:\WINDOWS\dtlorco.dll
      C:\WINDOWS\ecinifijorecewe.dll

      DDS::
      uInternet Settings,ProxyOverride = <local>

      Registry::
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Dyerujililu"=-

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Mkucozabulamu"=-

      SysRst::

      Reboot::
      • Save this as CFScript.txt, in the same location as ComboFix.exe



      • Referring to the picture above, drag CFScript into ComboFix.exe
      • When finished, it shall produce a log for you at C:\ComboFix.txt
      • Please post the new log in your next reply along with another HijackThis log.
      Quote
      An undefined problem has an infinite number of solutions.
      —Robert A. Humphrey

      stephified

        Topic Starter


        Greenhorn

        Re: please help 2 iexplore.exe in task manager?
        « Reply #5 on: September 09, 2010, 06:14:56 PM »
        logs requested.


        [recovering disk space - old attachment deleted by admin]

        CBMatt

        • Mod & Malware Specialist


        • Prodigy

        • Sad and lonely...and loving every minute of it.
        • Thanked: 167
          • Yes
        • Experience: Experienced
        • OS: Windows 7
        Re: please help 2 iexplore.exe in task manager?
        « Reply #6 on: September 11, 2010, 06:48:27 AM »
        Okay, I don't see anything of much significance, but go ahead and open up HijackThis one more time and click on the Scan without log button.  Once the scan is complete, look for the following entry:

        R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

        Place a checkmark next to it and click on the Fix Checked button.  If you scan again, the entry should be gone.  If not, please let me know.

        How is your computer now?  Still having trouble with the startup speed?  If so, it may simply need a spring cleaning.  In which case you may want to take a look here:
        http://www.computerhope.com/forum/index.php/topic,62253.0.html
        Quote
        An undefined problem has an infinite number of solutions.
        —Robert A. Humphrey

        stephified

          Topic Starter


          Greenhorn

          Re: please help 2 iexplore.exe in task manager?
          « Reply #7 on: September 11, 2010, 08:15:14 AM »
          OK, I checked the entry as prescribed and it doesn’t appear any more.

          Startup is much better, thanks.  Startup and browsing speed have increase significantly (no more freezing) and no more error messages appear.

          Thank you for all you help.

          S

          CBMatt

          • Mod & Malware Specialist


          • Prodigy

          • Sad and lonely...and loving every minute of it.
          • Thanked: 167
            • Yes
          • Experience: Experienced
          • OS: Windows 7
          Re: please help 2 iexplore.exe in task manager?
          « Reply #8 on: September 12, 2010, 01:25:53 AM »
          You're very welcome; I'm glad to hear that things are going better.
          Quote
          An undefined problem has an infinite number of solutions.
          —Robert A. Humphrey