iexplore.exe keeps respawning

Microsoft Windows xp professional w/serv...
July 13, 2010 at 19:01:12
Specs: Windows XP SP3
IExplore.exe keeps appearing - it will run as soon as I boot up, and if I kill the process, two of them will reappear. Ads will pop-up every few minutes and then I kill the process again and both reappear. One is running under the SYSTEM and the other is running under USER. I don't know what the problem is - nothing appears on any scans.

I have run 3 different AV's (McAfee, Norton, BitDefender) as well as AdAware, MalwareBytes and TrendMicro - All come up negative. I have checked all running processes and nothing seems to be out of the ordinary.


See More: iexplore.exe keeps respawning

Report •


#1
July 13, 2010 at 20:41:18

Report •

#2
July 13, 2010 at 21:06:14
It varies - some are for schools, some are for games to download (with the window where you try to "win" a prize). Thanks for helping!

Report •

#3
July 14, 2010 at 09:50:34
Well, first I would download Rkill (which is a malicious process terminator), after it runs, please DO NOT reboot, as this will allow whatever malicious software that's running to respawn: http://download.bleepingcomputer.co...

Then download Hitman Pro from here and run a scan: http://download.cnet.com/Hitman-Pro...

If that cannot find anything, please do a scan with Trojan Remover and see if that works: http://www.simplysup.com/tremover/d...

If this doesn't work, please let me know, and I shall get back to you later tonight. And you're very welcome!

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •

Related Solutions

#4
July 14, 2010 at 11:57:36
Hi!

I'm having exactly the same problem as above. I've run Rkill,
Hitman Pro and Trojan Remove and still having the same
issue.

I use Google Chrome, so iexplore.exe processes certainly
shouldn't be running. They're not actively running either: it's
not like Internet Explorer browsers are coming up. They're
coming on as background processes and running audio ads
that can't be turned off unless I CTRL+ALT+DEL and end the
iexplore.exe process, at which point it simply starts again.

AVG and Malwarebytes software also detect nothing.


Report •

#5
July 14, 2010 at 12:44:33
Tried RKill - only killed itself and GoogleDesktop.exe
Hitman Pro came up clean as well (just cookies)
The Trojan Remover gave green arrows across the board.
Here are two screenshots
1) one of an ad that has popped up
http://img651.imageshack.us/i/ad1s....
2) one of the process list from taskmanager
http://img690.imageshack.us/i/tskmg...

It's pretty mystifying - It is like an ad server, but I can't find the source anywhere - Thanks again!


Report •

#6
July 14, 2010 at 12:49:10
Scully - might be the same thing - I listen to my iphone so not sure if any audio comes up - I will pay attention to the next ones to see if mine have audio.

Report •

#7
July 14, 2010 at 19:27:53
Hi BigHappy

I managed to get the problem solved by doing what's
recommended here:

http://forums.majorgeeks.com/showth...

If you do what chaslang says in his first two replies (download
bootkit_remover.rar then follow the steps to run it), and get as
far as the bit where he says "make sure you tell me how
things are working now" everything migth be fixed for you, it
certainly is for me at least. No more iexplore.exe and
everything''s running a lot smoother.


Report •

#8
July 14, 2010 at 20:16:18
Looks like it worked - iexplore.exe isn't appearing - no more ads!

So, the bigger question is, what caused it? How do I prevent it from happening again? Why wouldn't a scan pick up a compromised boot record?


Report •

#9
July 14, 2010 at 20:17:02
xryanx - thank you again for your help!

Report •

#10
July 14, 2010 at 20:36:32
Well, like Rootkit's, Bootkits are designed pretty much the same way only they like to hide in the MBR or etc, and be undetected by normal AV programs. I'm glad you were able to get your problem solved!

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •


Ask Question