Discussion:
Internet Explorer launches stealthily
(too old to reply)
darkwing_duck
2009-03-18 13:11:33 UTC
Permalink
Running XP Pro as my OS, and I use Firefox as my default browser. In
the last day or so, out of the blue, even if I'm not doing anything on
my machine at that moment, I'll get a dialog box telling me that
"Internet Explorer is not my default browser and do I wish to set it
as my default browser". I clicked the box to "not check if IE is the
default browser". Then I start getting audio coming through my
speakers (like the audio associated w/ some websites). I checked my
running processes and noticed that IE was running, but there is NO IE
window open.

It's pretty clear to me that "something" (be it virus or whatever) is
launching IE on it's own but my virus software (McAfee) isn't
detecting it. Can someone help? I'm steering way clear of any of my
financial websites until I figure this out.

Thanks.
Robert
PA Bear [MS MVP]
2009-03-18 15:29:44 UTC
Permalink
There is a very good chance are that you are seeing the affects of a
hijackware infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

2. Using IE, not FF, run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Post by darkwing_duck
Running XP Pro as my OS, and I use Firefox as my default browser. In
the last day or so, out of the blue, even if I'm not doing anything on
my machine at that moment, I'll get a dialog box telling me that
"Internet Explorer is not my default browser and do I wish to set it
as my default browser". I clicked the box to "not check if IE is the
default browser". Then I start getting audio coming through my
speakers (like the audio associated w/ some websites). I checked my
running processes and noticed that IE was running, but there is NO IE
window open.
It's pretty clear to me that "something" (be it virus or whatever) is
launching IE on it's own but my virus software (McAfee) isn't
detecting it. Can someone help? I'm steering way clear of any of my
financial websites until I figure this out.
Thanks.
Robert
darkwing_duck
2009-03-18 16:26:29 UTC
Permalink
Extremely thorough response, thanks very much, Robear. I'll give
these a run and utilize the forums mentioned and post the final
resolution here for anyone else who might need it someday.

Robert
Post by PA Bear [MS MVP]
There is a very good chance are that you are seeing the affects of a
hijackware infection.
1. See if you can download/run the MSRT manually:http://www.microsoft.com/security/malwareremove/default.mspx
2. Using IE, not FF, run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.
Checking for/Help with Hijackwarehttp://aumha.net/viewtopic.php?f=30&t=4075http://mvps.org/winhelp2002/unwanted.htmhttp://inetexplorer.mvps.org/data/prevention.htm
   http://inetexplorer.mvps.org/tshoot.htmlhttp://www.mvps.org/sramesh2k/Malware_Defence.htmhttp://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance inhttp://spywarehammer.com/simplemachinesforum/index.php?board=10.0,http://forums.spybot.info/forumdisplay.php?f=22,http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Adminhttp://aumha.net
DTS-Lhttp://dts-l.net/
Running XP Pro as my OS, and I use Firefox as my default browser.  In
the last day or so, out of the blue, even if I'm not doing anything on
my machine at that moment, I'll get a dialog box telling me that
"Internet Explorer is not my default browser and do I wish to set it
as my default browser".  I clicked the box to "not check if IE is the
default browser".  Then I start getting audio coming through my
speakers (like the audio associated w/ some websites).  I checked my
running processes and noticed that IE was running, but there is NO IE
window open.
It's pretty clear to me that "something" (be it virus or whatever) is
launching IE on it's own but my virus software (McAfee) isn't
detecting it.  Can someone help?  I'm steering way clear of any of my
financial websites until I figure this out.
Thanks.
Robert- Hide quoted text -
- Show quoted text -
PA Bear [MS MVP]
2009-03-18 16:37:53 UTC
Permalink
YW. We aim to please!
Post by darkwing_duck
Extremely thorough response, thanks very much, Robear. I'll give
these a run and utilize the forums mentioned and post the final
resolution here for anyone else who might need it someday.
Robert
Post by PA Bear [MS MVP]
There is a very good chance are that you are seeing the affects of a
hijackware infection.
1. See if you can download/run the MSRT
manually:http://www.microsoft.com/security/malwareremove/default.mspx
2. Using IE, not FF, run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need
be:http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.
Checking for/Help with
Hijackwarehttp://aumha.net/viewtopic.php?f=30&t=4075http://mvps.org/winhelp2002/unwanted.htmhttp://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.htmlhttp://www.mvps.org/sramesh2k/Malware_Defence.htmhttp://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance
inhttp://spywarehammer.com/simplemachinesforum/index.php?board=10.0,http://forums.spybot.info/forumdisplay.php?f=22,http://aumha.net/viewforum.php?f=30,
or other appropriate forums.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Adminhttp://aumha.net
DTS-Lhttp://dts-l.net/
Running XP Pro as my OS, and I use Firefox as my default browser. In
the last day or so, out of the blue, even if I'm not doing anything on
my machine at that moment, I'll get a dialog box telling me that
"Internet Explorer is not my default browser and do I wish to set it
as my default browser". I clicked the box to "not check if IE is the
default browser". Then I start getting audio coming through my
speakers (like the audio associated w/ some websites). I checked my
running processes and noticed that IE was running, but there is NO IE
window open.
It's pretty clear to me that "something" (be it virus or whatever) is
launching IE on it's own but my virus software (McAfee) isn't
detecting it. Can someone help? I'm steering way clear of any of my
financial websites until I figure this out.
Loading...