iexplorer.exe infected

[villhelm]

Upon launching IE programs attempt to add themselves to my
startup registry. While MSAS blockes it several times, it
eventually relents. (would be more useful if MSAS
identified the file that was trying to make the changes)
Also, I get notifications to the effect that: "We have
detected suspicious activity on your network. Would you
like to learn how you can protect yourself." (Not an
internet pop up, but result of infected .exe files on my
comp) Clicking yes brings me to
http://www.msnprotection.com/search.php?pin=14044 If that
works for you, notice illegal use of microsoft logos.

Suspected spyware report will not send from my comp. ?

 

[Andre Da Costa]

Try running a scan in safe mode to safe remove any successful intrusion. On
the scan page, choose scan options > Full system scan. Have you checked the
Quarantine in AntiSpyware and blocked events to see if the spyware programs
are listed there?

Also continue to use additional third party antispyware solutions along MSAS
to keep safe:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://forum.aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com

 

[Ron Chamberlin]

Hi villhelm,

First, thanks for the site you mentioned. I'll report that up the tree for
some action at once.

Now for your issue, let's try this set:
Boot into Safe Mode (F8) at startup;
Empty your temporary files AND your Temporary Internet Files C:\Documents
and Settings\Username\Local Settings\Temporary Internet Files folder ;
Run the scan while in safe mode;
If you are running SP2, open IE--->Tools--->Manage Add-ons, and uncheck any
BHO's that you don't recognize.

Ron Chamberlin
MS-MVP