Explorer process oddly high

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Saken, Nov 10, 2011.

  1. Saken

    Saken Private E-2

    After foolishly clicking a link to a malicious/phishing site, i noticed that my start menu began lagging, as in, while scrolling through, say, 10 items on the start menu, the first item scrolled over would be highlighted, however the animation would not be flush all the way to the 10th item/would not show the animation at all, as i scrolled up.. if you understand what i mean.

    Another problem was that anything i right-clicked on lagged more than usual.

    I checked up on this and it seems my explorer.exe shot up to a constant 10%.

    Immediately i ran checks after going thru the read and run me first, and then the Windows 7 cleaning procedure, however i did not run combofix or mgtools.

    SAS found nothing, MBAM found nothing, my IS, Trend Micro(kind of bad), also found nothing. I also ran Spybot for good measure and that found nothing either.

    Upon reboot, the system was fine and explorer.exe did not appear at a constant 10% CPU usage.

    So i thought it was a key logger in the temporary files (cleaned by CCleaner)

    However, just recently i was playing a game which crashed. Straight afterward this problem came back. Now i do not want to restart the computer as i want to pinpoint what is causing it and where it is.

    I'll attach the copy of the scan i obtained from MBAM, obtained a week ago, I cannot locate the other logs.

    The reason i don't really want to use ComboFix is that i recognize it is a strong program, and my computer is relatively new, I don't want to have to resort to such programs yet :|

    I know the MBAM log probably doesn't say much, so if you guys want me to run thru all the procedures again just tell me.
     

    Attached Files:

    • MBAM.txt
      File size:
      886 bytes
      Views:
      3
    Saken, Nov 10, 2011
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, we need you to run through all the procedures and attach the requested logs, including ComboFix.
     
    TimW, Nov 10, 2011
    #2
  3. Saken

    Saken Private E-2

    Here we go
     

    Attached Files:

    Saken, Nov 11, 2011
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not finding any malware in your logs. I suggest you post in the software forum.

    Since you are not having any malware problems, it is time to do our final steps:

    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.


    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    10. After doing the above, you should work thru the below link:


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0


    Majorgeeks Geek Wear. Hats, T-Shirts, Hoodies

    MajorGeeks on FaceBook
     
    TimW, Nov 11, 2011
    #4
  5. Saken

    Saken Private E-2

    Thanks for that TimW :)
     
    Saken, Nov 12, 2011
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome. Safe surfing. :)
     
    TimW, Nov 12, 2011
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds