i realize that theres already a post about this but in my case, its a bit different. i can't find anything in windows or system32 folder.. spybot,ad-aware,nod32 gave no trace of where this IEXPLORE.exe process is running from.. this thing is using 40k-50k of my memory, there are several of them in my task manager. there is also two files in C:\Documents and Settings\Administrator\Local Settings\Temp that keep on renaming itself, cant be deleted because its being used.. and no sign of it when i run in safe mode.. im stumped.. please someone help me!

Have you tried MOVE ON BOOT " If at first you don't succeed, destroy all evidence that you tried."

thats a nice program, but i dont think those two files in temp folder is the source but i'll try it

after initiating restart, i got an error message but comp was too fast to shut down before i could read it, after reboot.. the files remain..

If you like a deeper look for malware post the results of the following two scans. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop. !!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!! Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd" Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

hi jabuck, sorry i didn't reply sooner.. had to go through a couple of days of reformatting and things.. not only because of the IEXPLORE.exe problem. everything is good now, thanks all for the help.