Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Internet explorer.exe evaluation


  • Please log in to reply

#1
Wayfr

Wayfr

    Member

  • Member
  • PipPip
  • 45 posts
Hello, I apologize if this has found the wrong forum. My problem is IE.exe. I observed through "Who's Connected" tool that IE establishes a connection on my network, for a matter of 10 sec, then disappears, only to come back and repeat the scenario, again and again, continuously.

Has anyone experienced this before and if so...any suggestions? Thank-you.
  • 0

Advertisements


#2
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Disable the connection, or boot the PC with the router unplugged to see if you get any notification of a programme not being able to access the internet
  • 0

#3
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Keith, thanks for looking at my problem. IE is making a network connection every 8- 10 sec even though the PC is idle and not being used by the user. I just put a software firewall on this PC...confirmed the users computer is launching traffic to a remote host...it looks like SYN pacs...maybe this is a Zombie M/C?
  • 0

#4
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
I was hoping that with the connection disabled there would be a pop up saying whatever is trying to connect

Online Scans

Panda Scan

House Call

If Trend Micro freezes during updating, close then retry

Trend Micro Spyware Scan

Kaspersky Online Scan


Which software firewall did you install?
  • 0

#5
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Keith, thanks for getting back to me. The PC doesn't seem to have much in the way of malware. I used TrendMicro and cleaned up a couple of tracking cookies and this...crackingapps_snadboy. I dropped in this firewall called"Agnitum". It's showing that IE is trying to connect to a remote address..."oshe.no-ip.org." When I release the block, IE makes just a quick connection then seconds later makes another connection. This I observe through the network tool " What's Connected". I don't know what is commanding the transmission. Any ideas?
  • 0

#6
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Is there anonymous browsing software on the PC

http://www.no-ip.com/
  • 0

#7
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Yea Keith, I checked and all I saw was one...Hide IP program.There didn't seem to be any suspicious browsers. Is there any way to see what is using IE to connect to this network?
  • 0

#8
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Try checking IE history to see which pages it is visiting
  • 0

#9
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
There wasn't much to go on in the history. It was cleared this afternoon. Keith, usually, doesn't a program make an established connection for some time longer than just a few seconds? I keep observing IE making these short established ones and that's puzzling.
  • 0

#10
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
You could put ZA Free on there, set to check everything, (programme control, high)

http://www.filehippo...zonealarm_free/

Disable the other one, after you install ZA

You can keep either
  • 0

#11
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Say Keith, this IE thing has attempted over 1100 times to make a connection to that remote address. When I allow IE to connect, it continues to break after connecting and then re-establishing another connection, once again. It's connecting and then breaking at least 10 times a minute (if I don't block it)
  • 0

#12
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Post a Hijack This Log in the malware forum to see what they say

If you have ZA can you block it and tick remember this decision and have IE run properly

If it doesn't you can open ZA programme control and remove it to reset it
  • 0

#13
Wayfr

Wayfr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
OK Keith, I'll post in the malware forum once I give this another kick. Thanks and maybe now you can get some ZZZ's.
  • 0

#14
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
There must be something in the background

Hope it goes well
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP