Jump to content
Sign in to follow this  

iexplore running embedded on its own / browser redirect malware

Recommended Posts

Hi, I have a couple of symptoms of malware:

1. The iexplore.exe process starts up on its own, uses increasingly more memory and uses the internet.

- I used Process Explorer (http://technet.microsoft.com/en-us/sysinternals/bb896653) to have a look at it and saw that it was being run under an svchost.exe process (post-99338-0-79253900-1320761588.jpg)

- Process Explorer also showed me that it's being run embedded, and from my desktop (post-99338-0-16586900-1320761595.jpg)

- I can also see what IPs it's accessing (post-99338-0-07307200-1320761600.jpg)

2. Using any browser (IE, Firefox or Google Chrome), I experience redirecting to ad sites and other crap.

I've tried a few things including aswMBR, MalwareBytes Anti Malware, Spybot S&D, TDSS Killer and ComboFix but nothing has gotten rid of the damn thing!

I've worked around the problem temporarily by renaming firefox.exe to firefox1.exe, this prevents the redirecting issue. I've also renamed iexplore.exe to iexplore1.exe and this has stopped it from starting up on its own, but IE won't work with a renamed exe so I haven't been able to use IE. This is far from a fix though as the malware is definitely still there.

Hopefully someone here can help me.



Share this post

Link to post
Share on other sites

Hello and welcome to Malwarebytes

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

Don't use any temporary file cleaners unless requested - this can cause data loss and make recovery difficult

You have 3 Options that you can choose from as listed below:

  • Option 1 —— Free Expert advice in the Malware Removal Forum
  • Option 2 —— Paying customer -- Contact Support via email
  • Option 3 —— Premium, Fee-Based Support


As we don't deal with malware removal in the
General Malwarebytes' Anti-Malware Forum
, you need to start a topic in the

Malware Removal forum
so a qualified helper can help you fix any malware related problems/infections you may have.

  • Please read and follow the
    , skipping any steps you are unable to complete.

  • After posting your new post, make sure under
    , you select
    Track this topic
    and choose
    Immediate Email Notification

    so that you're alerted when someone has replied to your post.

Please do not post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies.

If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

    • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.


    • You may send a Private Message to a Moderator asking for assistance.


Alternatively, as a paying customer, you can contact the help desk at


If you would like to use our
Malwarebytes Premium Services
, Comprehensive solutions to all your computer support needs—from installation and set-up to troubleshooting and tune-ups go to our
support site.

Please be patient, someone will assist you as soon as possible.

PS: Please use the "Add Reply" Add-Reply.png button not the Reply button when you start replying.

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.