• 	Enter your search terms
  	Web www.linabbs.com Submit search form

• Linabbs's blog

  • ZA采用升級安裝或者導入舊版ZA的配置文件到新版導致程序列表假死的Bug。
  • 裝了ZA，如何使你的開機速度快點
  • 如何設置查看局域網內被設入internet區機器的共享資源
  • ZA也可以做到低資源占用！
  • 關于za for vista（在VISTA下用ZA的人過來看看）
  • CheckPoint Integrity Desktop v6.5.063.207 KeyGen
  • 戰術攻防之近距離搏擊篇(ARP)攻擊
  • 還在使用老版ZA的朋友們注意：ZoneAlarm防火墻產品有多個本地權限提升存在漏洞
  • Knowledge Base / KB Extended (KE) 內容列表及說明
  • 關于《利用ZA專家規則，允許/禁止端口》的一點補充和說明

• Categories

  • Virus
  • Windows7
  • Zonealarm

• Recent Comments

  • punji on programs on my pc will not open. they say can not connect to the internet
  • kymodoce on [Resolved] can’t open antivirus site and update antivirus

• Recent Posts

  • ZA采用升級安裝或者導入舊版ZA的配置文件到新版導致程序列表假死的Bug。
  • 裝了ZA，如何使你的開機速度快點
  • 如何設置查看局域網內被設入internet區機器的共享資源
  • ZA也可以做到低資源占用！
  • 關于za for vista（在VISTA下用ZA的人過來看看）

• Archives

  • April 2009
  • March 2009
  • February 2009
  • January 2009
  • August 2008
  • January 2008
  • December 2007

• Blogroll

  • Linabbs
• 
  

• Pages

  • About

• Meta

  • Login
  • Entries RSS
  • Comments RSS
  • WordPress.org

• Spam Blocked

  343 spam comments

  blocked by
  Akismet

A process called "iexplore.exe" has been giving me endless pop ups. Going Crazy here. When I have NO IE windows open 2 processes of "iexplore.exe" are running, and I am sure that these are generating the popups. Ending the processes does not help because they pop right back up in the list about 1-2 seconds after ending the process. (I read this and I just copied it, same bs is happening.)

I’ve ran system scan multiple times with no results.

Here is my HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:35:47 PM, on 12/6/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/…ch/search.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/…/www.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://att.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/…/www.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: (no name) - {af53dfe0-23a8-4ffd-a599-7e253b55f5cc} - C:\WINDOWS\system32\mejeweme.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [zemevijiri] Rundll32.exe "C:\WINDOWS\system32\fapasego.dll",s

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [CPM53dc463a] Rundll32.exe "c:\windows\system32\vujigami.dll",a

O4 - HKLM\..\Run: [50ef75a6] rundll32.exe "C:\WINDOWS\system32\selekide.dll",b

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Clock Locks] C:\DOCUME~1\Owner\APPLIC~1\MOVEPH~1\Knob Jugs.exe

O4 - HKUS\S-1-5-19\..\Run: [CollagesSystray] C:\Program Files\Collages.net Inc\Collages.net Desktop\CollagesSysTray.exe (User ‘LOCAL SERVICE’)

O4 - HKUS\S-1-5-19\..\Run: [zemevijiri] Rundll32.exe "C:\WINDOWS\system32\fapasego.dll",s (User ‘LOCAL SERVICE’)

O4 - HKUS\S-1-5-20\..\Run: [CollagesSystray] C:\Program Files\Collages.net Inc\Collages.net Desktop\CollagesSysTray.exe (User ‘NETWORK SERVICE’)

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1\bin\npjpi141.dll

O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1\bin\npjpi141.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O15 - Trusted Zone: http://*.teenchat.com

O20 - AppInit_DLLs: C:\WINDOWS\system32\geratuna.dll c:\windows\system32\vujigami.dll

O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vujigami.dll

O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vujigami.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

–

End of file

–Any help would be greatly appreciated.

Related Posts:

• January 4, 2009 -- [Active] Explorer.EXE and IEXPLORE.EXE virus
• March 3, 2009 -- services.exe infected (TROJAN HORSE)
• March 3, 2009 -- Generic Host Process for Win32 Services has encountered a problem
• March 3, 2009 -- Generic Host Process for Win32 Services has encountered a problem
• February 14, 2009 -- Windows Installer problem
• February 14, 2009 -- generic host process for win32 services has encountered a problem
• February 2, 2009 -- Trojan Horse readme.exe
• February 2, 2009 -- scvhost problem..
• January 5, 2009 -- [Active] Another search engine pop-up redirect problem
• January 5, 2009 -- [Active] Malware problem

written by lina \\ tags: Active, cleanup, configuration, crashes, exe, free, help, hijackthis, iexplore, increasing performance, microsoft windows support, network, networking, problem, security, spyware removal, technical support, troubleshooting, windows problems, windows vista, windows xp, [Active] iexplore.exe problem.

Comments