SOLVED "iexplore.exe" running in background without IE being open

Discussion in 'Malware Removal Assistance For Windows' started by Ramen, Feb 8, 2015.

Thread Status:
Not open for further replies.

Need Malware Removal Help?

We offer free malware removal assistance to our members. Sign Up now, and get free malware removal support.

  1. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    Infection date and initial symptoms:
    8th Febuary 2015

    PLease note that all symptoms are occuring WITHOUT having to open IE.
    I only have used firefox/chrome.

    Firefox being extremely slow (not ALL the time but sometimes)
    Explorer(not internet, the file explorer) being slow sotimes (Note: This has been the case with my Laptop from time to time)

    I checked to find in my Taks Manger (Showing processes of all users)
    that there were 26 i.explore.exe processes all consisting of 110-120KB!

    ALL of the 26 processes were found under the location of

    Programme Files/Internet Explorer/ i.explore.exe

    Ulike the repots on this threads or other websites such as youtube I do not get any
    NO popups/redirections/ scareware ish ads for a AntiVirus/Malware software
    in Firefox or Chrome (Havent used IE to check)

    And also although I think its a hadware failure, the sound completely stops randomly
    after about 5-10 minutes of playing a video in Youtube( according to the speaker on the bottom right, its still is playing sound and when External speakers/earphones were used there are no problems)
    Current issues and symptoms:
    After all the removal attempts, I restarted. On startup I always get the TRDC Reminder which froze when I try to click close (probably because I was rushing) and before I did anything-else I booted the task manager to find iexplore.exe running.

    But iexplore.exe suddently stopped running in background (n.b. without opening the IE Browser)after running FRST64.exe for some reason

    To double check i booted the IE Browser. in the task manager,
    IE browser a new process appears the file location is as follows

    C:\Program Files (x86)\iexplore.exe*82

    When IE brower is opened, the iexplore.exe that reappears in the taskmanger
    and increases its size to 8,900 kb - 9,00kb (constantly but randomly changing the sizeeven when the browser is staying on google uk homepage) and the iexplore.exe disappears when the browser is closed and has not come back yet so far.

    The Firefox Browser seemt ohave no visible changes, still NO redirections no scareware adds
    or popups as I have seen in othe reports.
    Steps taken in order to remove the infection:
    foce ending the iexplore.exe manually one by one
    (got rid of duplicates but found always one remained untill
    the fore-mentioned FRST which IfI recall correctly is just makes a report
    so its a mystery)
    ___Run Under Normal Mode_____
    1) AdwCleaner (Have attached the latest scan log)
    2) AVG 2015 Free Edition (Did not found anything)
    3) ECshield on all External HDD and C+D Drives

    ______Run under Safe-Mode_____
    3) Super AntiSpyware Free Edition- Found a lot of Cookie Trackers but Spybot seems to have got rid of the logs as I cannot locate it wthin the log section
    4) Spybot - Will attach
    5) CC Cleaner
    Through my research I have found mixed results that iexplore.exe can be safe but also could be
    a malware/virus/trojan so I wanted your excellent team to scout it out.
     

    Attached Files:

  2. argus

    argus Former MalwareTips Staff

    Apr 24, 2014
    3,394
    226
    C:\Program Files (x86)\iexplore.exe*32 is legitimate file.
    It's part of the tab crash/isolation process. Tabs run in separate instances. Nothing to worry about.

    Logs doesn't show active infection.
     
  3. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    thanks argus you made me feel so much better
     
  4. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    how about the iexplore.exe without the *32? is that also a legitimate internet explorer process? just wanted your clarification
     
  5. argus

    argus Former MalwareTips Staff

    Apr 24, 2014
    3,394
    226
    Y
    Yes :)
     
  6. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    Thank you will post again if something looks fishy 、(hopefully not)
     
  7. argus

    argus Former MalwareTips Staff

    Apr 24, 2014
    3,394
    226
    don't worry.
    Malware climbs CPU 100%
     
  8. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    Hmm I just got back from work and checked the processes by all users and seeing multiple iexplore.exe again (this time only 5) (it was put to sleep when I was working)

    the location is once again for ALL the mulitple processes are in C:\Program Files (x86)\iexplore.exe

    could you explain
    1)why both iexplore.exe and iexplore.exe*32 is run under two different processes when IE browser is open)
    2)Why there are mutiples of iexplore.exe even when IE browser is closed?
     
  9. argus

    argus Former MalwareTips Staff

    Apr 24, 2014
    3,394
    226
    Because the system (X64). System x86 has only iexplore.exe
     
  10. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    So how about the iexplore.exe running without IE browser? is it as you explained in your previous
    post that about multi tabs, it should be running even when IE browser is CLOSED?

     
  11. argus

    argus Former MalwareTips Staff

    Apr 24, 2014
    3,394
    226
  12. Ramen

    Ramen New Member

    Aug 17, 2014
    30
    0
    Nope not a virus according to VirusTotal.
    Thank you Argus once again sorry for being a pesky paranoid client.
     
Loading...
Similar Threads Forum Date
"iexplore.exe" running in background without IE being open Malware Removal Assistance For Windows Sep 12, 2015
My GPU is heating because i have iexplorer and other programms running like exe*32 Malware Removal Assistance For Windows Nov 28, 2014
iexplorer.exe*32 and dllhost.exe*32 processes running using all RAM Malware Removal Assistance For Windows Oct 24, 2014