Internet Explorer

[Guest]

I believe I have malware of some kind. I can't seem to be able to get rid of
it.
I click on IE icon, the hard drive light flicks a few times and then
nothing. Clicking the icon a second time opens IE which will then freeze
eventually, sometimes 5 minutes later, sometimes longer. If I go into task
manager, it show multiple versions of IE running, all of them are different
sizes.
I am running Norton Internet Security with Antivirus turned on. Full system
scan found nothing.
Full scan of Ad Aware found nothing.
Full scan of Spy Bot didn't work either.
Any ideas?

 

[Prakash437]

Martin,

I would suggest you do this .. this is really a little boring and cumbersome
but if you are patient enough and determined to find whats happening, this
would help a lot ..

1. Download filemon .. www.sysinternals.com/files/NTFILMON.ZIP

2. Its an excellent file monitoring tool. Click on this utility, and in its
filter option, enter "iexplore.exe" and let it run. This will catch all the
files being accessed, when you run internet explorer.

Similarly if you are used to registry changes, u can also use another tool,
regmon
www.sysinternals.com/files/ntregmon.zip
to find the registry values being accessed by internet explorer.

This wa you can find any unusual activity goping on in your machine and take
appropriate actions (Deleting the files/registry values).

Hope it helps ..
prakash

 

[Rock]

I believe I have malware of some kind. I can't seem to be able to get rid of
it.
I click on IE icon, the hard drive light flicks a few times and then
nothing. Clicking the icon a second time opens IE which will then freeze
eventually, sometimes 5 minutes later, sometimes longer. If I go into task
manager, it show multiple versions of IE running, all of them are different
sizes.
I am running Norton Internet Security with Antivirus turned on. Full system
scan found nothing.
Full scan of Ad Aware found nothing.
Full scan of Spy Bot didn't work either.
Any ideas?

All checks for spyware and viruses need to be done in safe mode. In
addition to Adaware and Spybot try these tools. Always update them
first, then boot into safe mode and run them:

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

For viruses, start with Trend Micro’s Sysclean and McAfee’s Stinger.
Download them and the Sysclean signature file. Turn off system restore,
boot into safe mode and run them. Boot back into normal mode and run a
full AV scan with your normal AV program. Then turn system restore back
on.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/

You should also regularly run at least two of these online scans in
addition to your regular up to date AV program:

Online and Downloadable Virus Scanning:

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Bit Defender Online Virus Scan:
http://www.bitdefender.com/scan/license.php

Symantec Online Virus and Security Scan:
http://security.symantec.com/ssc/home.asp

TrendMicro:
http://housecall.trendmicro.com/housecall/start_corp.asp

McAfee Online Virus Scan:
http://www.mcafee.com/myapps/mfs/default.asp

RAV AntiVirus - Scan Online
http://www.ravantivirus.com/scan/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm