Re: iexplore.exe

From: Malke (malke_at_nospoonnotreally.com)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 05:56:28 -0800

Menno Hershberger wrote:

> OK.. I guess I didn't make it real clear, but I did mention that
> it
> wasn't specific to Eudora... that's just where I notice it the most.
> It
> has happened in other apps as well. And then there's been times when
> I shut windows down and a window comes up saying it's trying to "end"
> iexplore.exe. I usually have to end it manually. Even though Internet
> Explorer was not running at the time of shutdown.
>

Well, as you pointed out, iexplore.exe is Internet Explorer. The reason
that I first mentioned the possibility that this is a virus is because
having more than one instance of IE running is a classic symptom of
trojan infection. I did find this one page about multiple instances of
IE running, which mentions a few trojan names:

http://www.computing.net/security/wwwboard/forum/7939.html

If you are sure that your av is up-to-date and you can't find anything
that looks like a trojan process, then I don't know. Maybe it would be
good to download HijackThis and look at the log, or try one of the
anti-trojan programs. It certainly sounds to me like your box is
compromised and is busy sending something out. Check in all the user
accounts, as well as your own (if applicable).

Good luck,

Malke 

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

Relevant Pages

  • Re: My account was hacked, I would like to share my story to warn others.
    ... guildportal.com got attacked and a trojan was embedded in the welcome messages of some guild's websites. ... Now I keep seeing people saying this only affected people who haven't updated their Internet Explorer in 6 months and didn't have an antivirus program running... ... I have a firewall running on my router, I have Sygate Personal firewall running on this computer, I have AVG Pro, up to date running, and I ALWAYS make sure my Windows updates are current. ... So my wife logged in on her account and checked through the guild list when my character was last online. ...
    (comp.sys.mac.advocacy)
  • Re: please explain this
    ... As far as a trojan, I have ran numerous virus scans, rand ... Microsoft Internet Explorer pop up (on this discussion ...
    (microsoft.public.security)
  • Re: Follow up on Port 5000 - and another Q. or two...
    ... Check out the posts here locating a Trojan Horse on your computer. ... > wonder is if some of those"apps" are not apps at all. ... Two other strange files, one is blocked and ...
    (comp.security.firewalls)
  • Trojan / Spyware Connection made to 64.240.175.18 every time you use IE ANti-spyware Anti-virus wont
    ... A friend mentioned the other day that he is seeing a connection is being ... made to 64.240.175.18 on port 8989, every time he use Internet Explorer. ... I did run a port monitor application and Lunched Internet Explore and went ... One of these key was used to lunch the trojan everytime you run IE. ...
    (Bugtraq)
  • Re: Downloader-VA trojan??????
    ... This trojan seems to attach itself to ... Internet Explorer as a helper program, and then when you launch IE, it ... First, be sure to turn off System Restore, because you will be deleting ... Look for the section about Browser Helper Objects. ...
    (microsoft.public.security.virus)