iexplore.exe

I am unsure of this one, never really looked into it, but you are saying you are running IE because of the casino games links. Hopefully someone else may have insight into it, so I am replying to bump it.

 

This can be a virus! See:

Backdoor.Pspider.310.b - http://securityresponse.symantec.com/avcenter/venc/data/backdoor.pspider.310.b.html
PWSteal.ABCHlp - http://www.symantec.com/avcenter/venc/data/pwsteal.abchlp.html

Trojan.Boxer - http://securityresponse.symantec.com/avcenter/venc/data/trojan.boxer.html

Trojan.KillAV.B - http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html

WORM_LOVGATE.F - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOVGATE.F

Trojan.Gaslide - http://securityresponse.symantec.com/avcenter/venc/data/trojan.gaslide.html

And if it is really iexplorer.exe it could be the RapidBlaster parasite. http://www.doxdesk.com/parasite/RapidBlaster.html


You should post a HijackThis log as a .txt file attachment.

 

before we try looking into the internet explorer issue, first a couple of comments and questions:

1) You appear to have two anti virus programs running

• Norton AntiVirus Auto-Protect
• Antivir Personal Edition

You should be only running one antivirus program.

2) I see this lines related to WeatherBug:

O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
​

If you have not already done so, uninstall WeatherBug using Add/Remove programs. If already uninstalled, fix those two lines using HijackThis and then boot in safe mode and delete the whole C:\Program Files\AWS directory.

3) Do you have any idea what the below items are? I believe they are some form a malware:

O4 - HKLM\..\Run: [logofunk] C:\PROGRA~1\REMOTE~1\FIRSTAXISVIEW.exe
O4 - HKLM\..\Run: [AceSeekCdromThird] C:\Documents and Settings\All Users\Application Data\elsebagsaceseek\Planmapi
​

If you do not know what they are, fix those lines with HijackThis and then boot into safe mode and delete:
C:\PROGRA~1\REMOTE~1 <----- the whole directory
C:\Documents and Settings\All Users\Application Data\elsebagsaceseek <----- the whole directory

Now reboot in normal mode and do a search on your PC for iexplore (without the .exe). You need to set the search options as I give below:

How to use windows XP search mechanism to look for hidden files:
If you use Search, you need to do the following:
Click Search and the Select "All files and folders"
Enter the filename in the "All or part of the file name:" box, so enter iexplore
Now select "More advanced options"
Make sure the following check boxes are checked:
- Search system folders
- Search hidden files and folders
- Search subfolders
Then click the Search button.

Tell me all the places it is found and also give the file sizes.

 

You're welcome!