Question about Microsoft Windows XP Home Edition

1 Answer

IExplorer.exe -virus taking all my cpu power

How do I get rid of this trojan? There are several IExplorer.exe instances running in taskmgr. Can not stop the process - it returns

Posted by on

1 Answer

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    Superstar:

    An expert that got 20 achievements.

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

  • Microsoft Master
  • 2,794 Answers

You will probably have to go to the store and pick up an anti virus program such as Norton or McAfee.

Unless you can download one.

Posted on Jul 15, 2008

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

2 Answers

Is the file wmipruse.exe a virus or something that can be used to disrupt my laptop?


To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe. Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.
Note: wmiprvsw.exe is the Sasser worm!
Note: The wmiprvse.exe file is located in the folder C:\WINDOWS\System32\Wbem. In other cases, wmiprvse.exe is a virus, spyware, trojan or worm!

May 25, 2014 | Microsoft Windows 7 Ultimate for PC

1 Answer

DATAMNGR COORDINATOR HAS ENCOUNTERED


Depending on which level of risk of the Pup.datamngr virus has infiltrated your PC, you might find it is hard to get rid of this sophisticated worm. Some people have successfully cleaned out the stubborn worm, but since one of the primary functions of this virus is to disable security programs,so the method of using anti-virus program is not always a foolproof approach.
Please follow these steps to get rid of Pup.datamngr virus manually:
Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn't work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in taskmgr and press OK. This should start the Windows Task Manager
Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.
Step 3: Delete malicious registry entries.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\random
Step 4: Remove malicious files of Pup.datamngr virus
C:\windows\system32\services.exe
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F34C9277-6577-4DFF-B2D7-7D58092F272F} (PUP.Datamngr)
C:\Program Files\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (PUP.Datamngr)

Sep 11, 2013 | Microsoft XP Operating Systems

3 Answers

I am trying to get rid of the xp home security 2011 virus.


Manual Removal:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to "XP Home Security 2011?. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
(random characters).exe
2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the computer and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to XP Home Security 2011 Virus.
4. Registry entries created by XP Home Security 2011 must also be remove from the Windows system. Please refer below for entries associated to the rogue program. [how to edit registry]
5. Exit registry editor.
6. Get rid of XP Home Security 2011 start-up entry by going to Start > Run, type msconfig on the "Open" dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
(random characters).exe
7. Click Apply and restart the computer.
XP Home Security 2011 Removal Tool:
In order to completely remove the threat from a computer, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected computer.
Using Portable SuperAntiSpyware:
To thoroughly clean a computer, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Download and run SuperAntiSpyware Portable Scanner.

Apr 06, 2011 | Operating Systems

1 Answer

HOW TO REMOVE THE ROOTKIT.TDSS caused by the Trojan virsus


Hi, You have to remove these to get rid of this Rootkit. This post is for an Advanced User Only!
Files and Processes:
  • Files which spread the Virus:
  • RkLYLyoM.exe, podmena.exe, file.exe, ~.exe, 7-v3av.exe, csrssc.exe (note that this is not CSRSS.EXE), 72631899.exe, 1776260179.exe, ucxmykkc.exe.
  • The above files will create processes and run while spreading the Virus and providing Backdoors to your machine as well as performing Remote Attacks on Servers.
  • This Rootkit and associated Trojan creates .sys (system files) to alter network configurations as well.
  • Delete these files.
  • _VOIDd.sys, _VOID[random].sys, UAC[random].sys, UACyylfjdaa.dll, TDSSnrsr.dll, TDSSmaxt.sys, tdssserf.dll, TDSSriqp.dll, TDSSciou.dll, TDSSoexh.dll, tdidrv2.sys, RkLYLyoM.exe, podmena.exe, tdssserv.sys, file.exe, ~.exe, 7-v3av.exe, csrssc.exe, 72631899.exe, 1776260179.exe, ucxmykkc.exe
  • Each variant of this is associated with one or more files in the above list. It drops .dll (dynamic link library files) as well. Dll files and Sys files are the actual performers in the background.
  • You have to remove these files from the startup as well. Using msconfig. From their you may be able to find additional files associated with this one as well. Verify by browsing. Browse by the file name. If you found that it is a virus, note the path and next time you will be able to remove it. I ll provide instructions at the bottom of this post.

  • Directories:
  • C:\WINDOWS\_VOID[random]\
  • Delete this as well.

  • Delete Registry values Associated with this.
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOIDd.sys
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOID[random]
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UACd.sys
Note: Random means the file name will be different for each instance.
  • Unregistering DLL files. The most important one.
  • You have to unregister these .dll files.
  • UACyylfjdaa.dll, TDSSnrsr.dll, tdssserf.dll, TDSSriqp.dll, TDSSciou.dll, TDSSoexh.dll.
  • The unregistering instruction will be provided at the bottom of this post.
You must delete your Temporary internet Files and Local Settings \ Temp. Located - Root:\Documents and Settings\[Admin account name - this may be either Administrator or any other account which has Admin Rights]\Local Settings\Temp. Note: Root is the Partition which has Windows Installed (Example C drive)
You must be able to see Hidden Files and Folders. Follow the steps...
You must clean your Browser Cache using Internet Options. Each and every browser has a place to clear the Cache. As an example "Google Chrome has it under Options -> Under the Hood -> Clear Browsing Data. Its better if you can disable Local Caching.
I recommend to do this in Safemode. Use F8 after restarting the machine. The select Safemode. Note: You may or may not find Processes associated with this RK however because they will not be loaded. If so you can use msconfig to locate "Startup" programs.
After everything done, flush your DNS. Get a Command Prompt (Start -> Run -> Type cmd.exe and hit Enter) Type this command and hit Enter. ipconfig/ flushdns
Contd...Post is too long...

Jul 13, 2010 | Dell Microsoft Windows XP Home Edition

2 Answers

I cannot start all my .exe files in Vista. I cannot also run my spyware. I think its the rundll32.exe virus.


Most Probably it is a virus that has infected your computer.

Please follow the steps below:
1) Restart the computer
2) Start tapping the F8 key
3) Select Safe mode from the list of options.
4) On the login screen select your Username.
5) Scan for the virus using the antivirus/antispyware.
6) Remove all the infections
7) Restart the computer.

It should work fine now.

Mar 22, 2010 | Microsoft Windows Vista Home Basic Edition...

1 Answer

Runtime error 216 at 0016d758


Hello and thank you for using Fixya!

This issue can occur if your computer is infected with a SubSeven Trojan virus (per, Microsoft).

Run a virus scan and rid of all viruses, malware, etc.

If you have a free antivirus, remove it and install a free trial of Kaspersky. This will rid the virus. You can then uninstall Kasperky and install the free one after removal of trojan.

http://www.kaspersky.com/trials

Hope this helps!

Jennifer

Dec 21, 2009 | Microsoft Windows Vista Ultimate Edition

1 Answer

Unknown file


In software Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs) within the Microsoft Windows operating system.
At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging, but it also causes some difficulty for end users wishing to see the memory usage or vendor legitimacy of individual services and processes. End users in Windows XP Professional (and derivatives, such as Windows Server 2003 and Windows XP Media Center Edition) can run the following command at the system prompt to get a breakdown:
tasklist /svc /fi "imagename eq svchost.exe" (NB: This command does not work in Windows XP Home.)
Due to being widespread among running processes, svchost.exe has long been a common disguise used by malware to hide its presence from the user. (One of the common trojan horses deceptively uses scvhost.exe). Users may then run tasklist with no arguments and match the reported PIDs with the previously shown Svchost instances. If memory usage appears abnormal, the user can look up the service names shown by their command on the internet to see if it is a known service or malware.
The Svchost.exe file is located in the %SystemRoot%\System32 folder. The main registry key involved at bootup is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost (values in this key will show the user at least a partial list of the actual processes behind instances of svchost).
The 30 April, 2007 release of WSUS 3.0 led to reports of svchost.exe issues, including 100% CPU usage, memory hogging, and excessive laptop fan/power usage.[1]

[edit] See also

Oct 29, 2008 | Microsoft Windows Server Standard 2003 for...

1 Answer

Svchost


"Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. It manages 32-bit DLLs and other services. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging. The svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm! To detect if it's a virus sometimes it will add letters to the Svchost to read thus SSVCHOST or SVCCHOST or something like that, thus making multiple services to run and slow down the computer, if that is the case the current antivirus you are using is not removing the virus, this can be done in the registry, its a complicated process if you do not know how to do it, so i would suggest you purchase a registry cleaner. NOTE: remember to backup the registry before you clean it

Aug 15, 2008 | Microsoft Windows XP Professional

1 Answer

",.exe" (comma.exe) causing a problem


Its your OS affected by virus..

Mar 04, 2008 | Operating Systems

2 Answers

SVC host error...


Hi,

The best way to get rid of these virus is to use kaspersky anti virus,and If u still get a svc host error u have to reinstall ur operating system or do a system restore.
Download kaspersky from here

Goodluck,
Dont forget to rate me as fixya..

Jan 07, 2008 | Operating Systems

Not finding what you are looking for?
Microsoft Windows XP Home Edition Logo

Related Topics:

102 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Operating Systems Experts

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Scott Fryer

Level 2 Expert

80 Answers

Alex Krenvalk

Level 2 Expert

401 Answers

Are you a Microsoft Operating System Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...