How to remove a virus in explorer.exe?

T

tiffany

Member
Joined
Nov 1, 2007
Messages
10
Reaction score
0
Hello everybody!

I need your help, maybe somebody knows how to help me with this thing...

About a year ago I caught a virus on my computer, I didn't clean it properly (as far as I undersatnd) and little by little it stopped working. When turning off the computer, it was written that there was an error in explorer.exe, it was written every time. Then, connecting to the internet, it was written "Attention! 55 critical system errors!". Well, when I didn't know what to do, I reinstalled Windows (Home Edition). I thought that I "killed" all viruses because there was a new Windows on my computer, but now the same thing is happening again! For the moment the computer works, but how long will it work? Again "critical errors", "explorer.exe" etc! I have NOD 32 as an antivirus, but as far as I see, it doesn't help me with this.
What can you advise me? Thanks to everybody in advance!

Tiffany
 
Tiffy, are you browsing the Internet when you get these errors?

Can you give us a screenshot when you get the error message? I strongly suspect it might be a hoax.

Safest way to scan for heebie-jeebies is to update your NOD32, switch off system restore, restart in safe mode and run a full system scan.

Regards

Libs
 
Start > Run > FORMAT C: /y <-- kidding.

You sure your memory (RAM) is ok?
 
Thanks a lot! I did these things, I mean safe mode, full system scan etc - it finds nothing, but everytime it heappens again.
And screenshort... I don't know how to give it...:o
 
Tiffany - use irfanview

or the old tried and trusted shift+prtscr, paste into paintbrush, save as jpg file and upload to somewhere where we can access it.

Oh, and give the URL of the website where it happens every time
 
u don't need to use irfanview. just press the "Printscreen" button on ur keyboard and then open Paint. Then press "Ctrl+V" to paste the screenshot in Paint. Then from the File menu, u can save the screenshot. and yes download and install spybot search and destroy as well.
 
Well, I got it about screeshorts, I will give it later (I am not at home for the moment, it's another computer). As for URL - I even don't have time to open any page, this window already appears!
 
that confirms it as stoke said - a spambot.

Just want to make sure as there are some sites with the same thing flashing at you.
 
and what about explorer.exe? I don't understand, if I reinstalled the operating system, so all the components must be new and safe - why does it heappen then? when restoring the system for the first time, it was already written that explorer.exe worked incorrect or something like this!
 
tiffany said:
and what about explorer.exe? I don't understand, if I reinstalled the operating system, so all the components must be new and safe - why does it heappen then? when restoring the system for the first time, it was already written that explorer.exe worked incorrect or something like this!
Click to expand...

it's cos the virus is still on ur pc and even tho u reinstalled, the virus just attached itself again. ur best bet is try first try spybot search and destroy and if all else fails, totally reformat ur pc and install xp on a clean hard drive. then install avg and spybot ang get zonealarm firewall(there is a free version available). i have these and i have had no problems with my pc.
 
I don't know about the reinstall option, did you fully format and reinstall, or simply install over your existing windows folder?

I had this baby, the bottom line is that they are trying to coerce you into buying their imaginary anti-virus software, and they keep on irritating you till you get rid of the software.

When removing it, I found that it consisted of about 9 different files that launch at varius stages while windoze is running or launching, and each time any one of the 9 files was launched, it fixed anything you had dome to get rid of the other 8 files.

I manged to get rid of 8 initially, but there was one that launched itself when you right clicked on anything that I struggled to get rid of, i eventually found it in a sys file and it was loading itself as a freaking mouse driver .. grrrrr!

So, if you did reinstall windows without formatting, then it may have reloaded that driver on windoze startup.

Anyways ... spybot will identify it, and we can then take it from there.

or - Unless you did format and reinstall, which means it then was reinstalled from a website you visited, or a flashdisk, or a stiffy, or a memory card, or, they can hide inside a printer's memory as well.

Annoying as heck.
 
THe last thing I would recommend is reinstalling the OS. From the sounds of it you have malware on your machine which hooks into the explorer.exe process. When explorer is fired up after you logon the malware becomes active. Some of the stuff is pretty tricky to remove but with a bit of patience it can all be removed.

Try out adaware/spybot or a few online virus scanners. If its a new piece of malware and you know what the infected file is try upload it to virustotal - they run it through about 20 or so virus scanners. From this you can lookup what the thing is or how to remove it.

With all malware/infections its best to startup in safe mode - this normally stops the malware from starting up. Some of the tricker malware even hooks into safe mode though :(
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X