|
View Full Version : Windows Explorer.exe 21steve 31-03-2005, 07:43 I have only recently noticed that windows explorer.exe is trying to contact ips in sygate. Is it possible for explorer.exe to be changed? I dont think I have ever noticed it in sygate before so have blocked all access. any help? cheers steev 31-03-2005, 08:19 It could be Windows Explorer, or possibly something dodgy. Certain types of virus (Codered and Mydoom amongst them) pretend to be explorer, while some dodgy viruses & other things along the lines of Agobot (http://www.google.co.uk/search?hl=en&q=agobot&btnG=Google+Search&meta=) will run as programs with similar names to Windows Explorer & Internet Explorer, to try & hide what they are. What Anti virus & Spyware software do you have on there? 21steve 31-03-2005, 10:24 sygate firewall, protowall, avg, ad aware, spybot etc. done panda scans etc. its just strange that ive never noticed it before so wondered if it could be replaced by an amended explorer.exe? Avalon 31-03-2005, 10:31 Originally posted by 21steve sygate firewall, protowall, avg, ad aware, spybot etc. done panda scans etc. its just strange that ive never noticed it before so wondered if it could be replaced by an amended explorer.exe? My explorer.exe asks for access to the internet ocasionally. I think its just bored? AJ sheffield 31-03-2005, 10:58 Check to see if the version of Explorer.exe is in the following location c:\windows\System32 folder. If it isnt then its most likely a trojan. Explorer often connects to the internet on my pc when I use things like Event viewer and clipboard viewer. Is it using large amounts of your CPU time up. Its is possible to permanently block Explorer form accessing the net. You could try doing a SmartWHOIS check on the IP address thats being accessed. 21steve 31-03-2005, 11:02 i think im just been paranoid. i have just never seen it thats all, and couldnt imagine why it needed to access specific ip addresses. i then wasnt sure if it was a protected system file, but all seems in order alchresearch 31-03-2005, 12:00 isn't explorer (in services) another name for the desktop? If you've set your desktop to be a web page and got some web content on it, then it will be trying to connect. vidster 31-03-2005, 17:27 Sygate will also block services/programs from accessing each other on your pc as well as accessing the internet. Explorer is probably just trying to access another sytem on your computer. Gazza 31-03-2005, 21:27 there is also a piece of spyware that goes by the name explorer.exe Use spybot search and destroy to clean you pc available here http://beam.to/spybotsd Ginner 01-04-2005, 00:29 Originally posted by AJ sheffield ......Is it using large amounts of your CPU time up. .. I'm running windows ME (yeah yeah, I know :blush: ) What tool can I use to determine what program is using how much CPU? Avalon 01-04-2005, 08:01 Originally posted by Ginner I'm running windows ME (yeah yeah, I know :blush: ) What tool can I use to determine what program is using how much CPU? Task Manager - CTRL+ALT+DEL and then click the performance tab... Ginner 01-04-2005, 14:41 Originally posted by Avalon Task Manager - CTRL+ALT+DEL and then click the performance tab... Hitting CTRL+ALT+DEL brings up the "Close Program" window that shows the running programs. But the only choice is to ENDTASK, SHUTDOWN or CANCEL. There are no tabs available. Avalon 01-04-2005, 15:38 Originally posted by Ginner Hitting CTRL+ALT+DEL brings up the "Close Program" window that shows the running programs. But the only choice is to ENDTASK, SHUTDOWN or CANCEL. There are no tabs available. Ok...well youve got me! |