MSFN Forum: Error in Explorer.exe - MSFN Forum

Jump to content



Unattended CD/DVD Guide Homepage · MSFN Forum Rules

If you have questions about customizing Windows XP that are nLite-specific, please post them in the nLite forum, not here. If you have questions regarding the unattended installation of Windows XP, please post them in the Unattended Windows 2000/XP/2003 section.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Error in Explorer.exe Windows XP professional (Russian) Rate Topic: -----

#1 User is offline   rickytheanuj 

  • Member
  • PipPip
  • Group: Members
  • Posts: 261
  • Joined: 09-April 07

Posted 28 May 2008 - 07:39 AM

I m using windows xp professional russian version. and from few days i m facing a explorer problem. (the screenshot is attached here). How can i solve this problem, and i m using kaspersky as antivirus.. and it detect that explorer.exe is transferring some hidden information... so it block it (explorer.exe) when i allow or deny it , it runs fine... but that message come in every minute... and allowing or denying that message several time my explorer.exe get terminated automatically....

What's the matter.. please solve my problem..

Thank's in advance

Attached File(s)




#2 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,937
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 28 May 2008 - 08:30 AM

How are you opening this page? Are you using Start > Run, or opening Internet Explorer and then typing in the URL manually in the address bar?

Otherwise, this looks like overly agressive antivirus, as the problem it's reporting isn't a problem at all, it's LRPC it appears (perfectly normal between explorer.exe and iexplore.exe)...

#3 User is offline   JedMeister 

  • Member
  • PipPip
  • Group: Members
  • Posts: 226
  • Joined: 19-July 06
  • OS:none specified
  • Country: Country Flag

Posted 29 May 2008 - 12:02 AM

It could just be overly agresive behaviour on the part of Kaspersky, but I'd look a little deeper first. I'd do a thorough malware check (using a number of different products, including spyware tools, rootkit tools and a second opinion antivirus such as bitdefender online or clamwin) there are a number of freeware options so you shouldn't need to spend any money.

Also its probably worth contacting Kaspersky to see what they think.

#4 User is offline   rickytheanuj 

  • Member
  • PipPip
  • Group: Members
  • Posts: 261
  • Joined: 09-April 07

Posted 29 May 2008 - 05:51 AM

View Postrickytheanuj, on May 28 2008, 07:09 PM, said:

I m using windows xp professional russian version. and from few days i m facing a explorer problem. (the screenshot is attached here). How can i solve this problem, and i m using kaspersky as antivirus.. and it detect that explorer.exe is transferring some hidden information... so it block it (explorer.exe) when i allow or deny it , it runs fine... but that message come in every minute... and allowing or denying that message several time my explorer.exe get terminated automatically....

What's the matter.. please solve my problem..

Thank's in advance


When i allow or deny i faced this new problem , and when i click on ok the explorer get terminate automatically and i have to re-run the explorer.exe pressing alt+crt+del>new task...

here is the picture of this..

And one more thing I found that, when ever i click on any link in internet explorer then the above error appear and i have to allow or deny or quarintial explorer... how can i solve this problem.

you guys said that the kaspersky is the main coz of this problem, but i don't want to uninstall kaspersky so please suggest me how can i set antivirus to allow that error always

Attached File(s)



#5 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,937
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 29 May 2008 - 07:15 AM

If you disable kapersky, does the problem occur? Also, when you do a full scan of your machine, does it come back as clean from kapersky?

#6 User is offline   Mr Snrub 

  • MSFT
  • Group: Super Moderator
  • Posts: 743
  • Joined: 14-September 04
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 29 May 2008 - 08:18 AM

Based on the first screenshot, the destination IP address was 82.98.235.216...

DNS info on the IP address:
http://private.dnsstuff.com/tools/ipall.ch...n=82.98.235.216

A quick search on that IP address brought up this:
http://www.ca.com/securityadvisor/virusinf...s.aspx?id=69931

Other references to Vundo/Virtumonde:
http://vil.nai.com/v...nt/v_127690.htm
http://www.virtumonde.net/

Given the referrer in the first image, and IE title bar in the second image implicate inetseeker.com, a search on "inetseeker vundo" brings up:
http://www.spywarein...showtopic=99091

The above references have detailed guides on how to go about removing the adware, if that's what you have.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2011 msfn.org
Privacy Policy