[rickytheanuj]

I m using windows xp professional russian version. and from few days i m facing a explorer problem. (the screenshot is attached here). How can i solve this problem, and i m using kaspersky as antivirus.. and it detect that explorer.exe is transferring some hidden information... so it block it (explorer.exe) when i allow or deny it , it runs fine... but that message come in every minute... and allowing or denying that message several time my explorer.exe get terminated automatically....

What's the matter.. please solve my problem..

Thank's in advance

Attached File(s)

•  error1.JPG (104.84K)
  Number of downloads: 14

[cluberti]

How are you opening this page? Are you using Start > Run, or opening Internet Explorer and then typing in the URL manually in the address bar?

Otherwise, this looks like overly agressive antivirus, as the problem it's reporting isn't a problem at all, it's LRPC it appears (perfectly normal between explorer.exe and iexplore.exe)...

[JedMeister]

It could just be overly agresive behaviour on the part of Kaspersky, but I'd look a little deeper first. I'd do a thorough malware check (using a number of different products, including spyware tools, rootkit tools and a second opinion antivirus such as bitdefender online or clamwin) there are a number of freeware options so you shouldn't need to spend any money.

Also its probably worth contacting Kaspersky to see what they think.

[rickytheanuj]

rickytheanuj, on May 28 2008, 07:09 PM, said:

I m using windows xp professional russian version. and from few days i m facing a explorer problem. (the screenshot is attached here). How can i solve this problem, and i m using kaspersky as antivirus.. and it detect that explorer.exe is transferring some hidden information... so it block it (explorer.exe) when i allow or deny it , it runs fine... but that message come in every minute... and allowing or denying that message several time my explorer.exe get terminated automatically....

What's the matter.. please solve my problem..

Thank's in advance

When i allow or deny i faced this new problem , and when i click on ok the explorer get terminate automatically and i have to re-run the explorer.exe pressing alt+crt+del>new task...

here is the picture of this..

And one more thing I found that, when ever i click on any link in internet explorer then the above error appear and i have to allow or deny or quarintial explorer... how can i solve this problem.

you guys said that the kaspersky is the main coz of this problem, but i don't want to uninstall kaspersky so please suggest me how can i set antivirus to allow that error always

Attached File(s)

•  errir2.JPG (116.54K)
  Number of downloads: 5

[cluberti]

If you disable kapersky, does the problem occur? Also, when you do a full scan of your machine, does it come back as clean from kapersky?

[Mr Snrub]

Based on the first screenshot, the destination IP address was 82.98.235.216...

DNS info on the IP address:
http://private.dnsstuff.com/tools/ipall.ch...n=82.98.235.216

A quick search on that IP address brought up this:
http://www.ca.com/securityadvisor/virusinf...s.aspx?id=69931

Other references to Vundo/Virtumonde:
http://vil.nai.com/v...nt/v_127690.htm
http://www.virtumonde.net/

Given the referrer in the first image, and IE title bar in the second image implicate inetseeker.com, a search on "inetseeker vundo" brings up:
http://www.spywarein...showtopic=99091

The above references have detailed guides on how to go about removing the adware, if that's what you have.