28 instances of Internet explorer running

  I have an asus quad with Win7 64 b installed.  If I look at Task manager Processes I have 28 internet explorers running, Applications will show internet explorer at this forum.  I first noticed this about a week ago when I received audio from my left speaker.  Since that time I was able to find internet explorer running under processes but not under applications.  I've run Norton 360 a few times and it will remove cookies. But still have the audio from the speaker. 

  I really like Norton 360 as a virus protection and I"m hoping you can help me resolve this problem.

Carl2

Try to run Norton Power Eraser tool:

http://www.symantec.com/norton/support/DIY/index.jsp


Check if it detects any threats and if it does, please provide us the filename and other details. Don't fix any files now, you can fix those after getting confirmation in this thread.


Yogesh

From the symptoms, it is likely that your machine has been infected with a boot/rootkit.  I would recommend that you visit one of these free malware removal forums to have it removed properly.

 

www.bleepingcomputer.com

http://www.geekstogo.com/forum/

http://www.cybertechhelp.com/forums/

http://forums.whatthetech.com/


  I tried the Norton power eraser yesterday and it found id40304.dll and removed it.  I've been watching IE n the task manager and it seems to behave normally since removing the dll.  I did a search last night which would bring up the multiple IE's running and did not run into any problems.  Pretty sure the problem has been solved and removed.  Thanks for the advice.

 

   I visited the sites but did not register, as posted above I think the problem has been found and removed.  Didn't think this site was so busy, thanks for taking the time to look into my problem.

Carl2

Check this thread to see if there are any similar entries in your Norton history, just to make sure that the only thing removed wasn't just a symptom rather than the disease.

 

http://community.norton.com/t5/Norton-Internet-Security-Norton/iexplore-exe-virus-trojan/m-p/256325#M119340

  Just did a check of the recient History, it goes to the 25 th.  I have about 50 Unauthorized access blocked (detail  actor C:/windows/ system32/conhost.exe)  on Aug,29 all at 5:39 pm.  Aug 30 9 unauthorized access blocked ( detail  actor

C:/windows/programs 86/internet explorer/iexplorer.exe)   Aug 30, nine more unauthorized access blocked for Iexplorer.exe.

Aug 30, ctfmonequ.exe downloader detected quarantined.  Mon Aug 30, adware hotbar detected, quarantined.  Aug 31,

 3 times:  Unauthorized access blocked,  Tracking cookied detected and removed.  

   I ran across that post before I registered here and did searches for things mentioned in the posts at that time.  Not sure what to look for in the history.  Most anti virus software just look for viruses and do not check for malware, spybots ect.

The computer still seems to run better, been using Task manager to keep track of IE which has been doing okay. 

Thanks again for the input, hope I wasable to supply you with the info which would help.

Carl2

The unauthorized access entries are okay.  That is just Norton logging every time something has to access its own files.  Keep an eye on intrusion prevention logs to see if anything is being blocked on a regular basis.  If you do still have an infection, you will see more malware being downloaded.  The downloader on the 30'th is more of a concern.

 

Removing bootkits from some of the machines can be a tricky business because of the OEM software that is added to the boot functions by Dell, and others.

 

It may just be a coincidence that you had the same symptoms as the other user, but I like to be careful that something wasn't done that just masked the problem.

Did a backup yesterday, everything still seems to be working well.

Carl2