another Jimbutt.com problem

Re: Jimbutt.com a pain in the jim

I am not aware of what is causing this problem specifically(Jimbutt.com or otherwise). However, I do not have the file "systr.dll" in my System32 folder, and the problems continue. The "Fxiegwfr.exe" is loading itself somehow everytime the internet is accessed(using I.E. or Firefox). I dont know if it is related to the randomly named 4character .DAT files or not. Or if it has relation to the double "explorer.exe." I do know that this file is loading atleast 20 porn sites in the background using I.E. specifically. These porn sites are a hassle cause they not only slow down the system, but some of thoes sites are listings for child pornography. As one would guess, that is not a good thing at all. I do not know what to do to get rid of this damn problem, or what is causing it. As I stated before I do not have the file "systr.exe"

I have used the following programs to try and rid myself of this problem, none of them worked.

Spybot
Spy Sweeper
Ad-Aware
McAfee Antispyware
CCleaner
Spy Cleaner
CounterSpy
Ewido

 

Re: Jimbutt.com a pain in the jim

I forgot to include this information in my previous post.

I am running: Zone Alarm Pro 6.0
It is specifically told not to allow the "fxiegwfr.exe" to access any part of the internet. This does not work, the firewall is being bypassed some how.

 

Might have solution to problem!

At another site I found some more users of Hijackthis software. A thread was made by a guy with the same problem. This is the instructions given by the responder.

Delete the following files:
sfcmon32.dll
c:/program~1\nendotwl (folder)
c:\Progam Files\AWS (folder)
edpj.dat
iegfxfrw.dll

I did not have any of the files listed but! the "iegfxfrw.dll" file. The "edpj.dat" file is was probably the current randomly named 4letter .DAT that was running. It makes a new one every time "fxiegwfr.exe" loads(but you all probably already know this). Anyway, I deleted the "iegfxfrw.dll" and made a new Hijackthis file which I will now post.

EDIT by chaslang: Unrequested, incomplete, inline log removed

It happens to list the "iegfxfrw.dll" as missing cause I deleted it. It is unknown to me as to why the updated Hijackthis file did not exclude it.

If the problem persist after my attempts with what I posted above, I will be back. If it is cured, I will post that you should follow them immediatly.

 

Chaslang,

Don't you think a more descriptive name for the post would be useful?

Cynex,
Norton Antivirus will not pick up the fxiegwfr.exe file. Symantec does not view the file to be malicious by itself.

Read the thread entitled - Unknown process: fxiegwfr.exe

 

True. Have you tried to google "fxiegwfr" or "fxiegwfr.exe"? Don't bother. There are less than five responses. Besides, my original post still stands. What does the file do? That answer requires reverse-engineering the PE. My hope was Symantec would provide a more in depth answer. Oh, well.