Home > Archive > 70-210 > December 2001 > What is iexpIore.exe ???





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author What is iexpIore.exe ???
mandre

2001-12-06, 8:59 am

Hello People i need some help to identify this file iexpIore.exe (no thats not a spelling error). I'm running Win 2000, and it's in my system32 folder. ZoneAlarm is alerting that it's trying to access the internet. Can some one Please tell me what it is or if it's a microsoft file?? Properties states that it was created 3 days ago. I have no clue where it came from.

If anyone can help me out that would be great. Thanks and take care
PotatoHead

2001-12-06, 10:42 am

I run Win2k and i have no such thing in my system32 folder. if it was created 3 days ago then im sure its not necessary to have. it may be a virus - i would scan it and make sure
RobertJ

2001-12-06, 12:32 pm

I know this is going to sound crazy lol, but this is just internet explorer
PotatoHead

2001-12-06, 1:21 pm

Internet Explorer is iexpLorer.exe - mine is like that anyways, plus why would it be in the system32 folder?
RobertJ

2001-12-06, 2:04 pm

Is yours really like that, I'm in Win 98 right now and mine is iexplore.exe, I have Win2000 on another machine, I'll check it out and get back to you.
PotatoHead

2001-12-06, 2:17 pm

mine is iexplore.exe (my fault, not iexplorer.exe)
RobertJ

2001-12-06, 2:26 pm

Hey, its not big deal, certainly not worth arguing over, well anyways I don't have an explanation on how internet explorer got in his system files.
PotatoHead

2001-12-06, 2:40 pm

RobertJ,
As far as i know your a good guy - I'm not tryin to start an argument with you - I was just clearing up my mistake - no hard feelings
mandre

2001-12-07, 6:32 am

Well i'm pretty sure it's not windows explorer, becuase i'm blocking it with my fire wall and my windows explorer is runnig fine.

Anyways Thanks for all your help Guys.
The Swede

2001-12-07, 8:51 am

This is definetly a trojan, it tries to masqerade itself by using a name similar to a legitime program and it lies in the system32 folder, that's sure seem like trojan behaviour to me.

You didn't say if it starts automatically but I guess it does, search for it in the registry and in the win.ini file.

Now's the question what kind of trojan it is, you said it tries to connect to the internet so my guess is that it might be a IRC warbot.
Start an MSDOS prompt and type netstat -an |findstr ":6667" (or check which port it tries to connect to in the Zonealert alert.
lefscc

2001-12-07, 10:17 am

Iexplore.exe is Internet Explorer
Spid

2001-12-07, 11:01 am

quote:
Originally posted by The Swede
This is definetly a trojan, it tries to masqerade itself by using a name similar to a legitime program and it lies in the system32 folder, that's sure seem like trojan behaviour to me.

You didn't say if it starts automatically but I guess it does, search for it in the registry and in the win.ini file.

Now's the question what kind of trojan it is, you said it tries to connect to the internet so my guess is that it might be a IRC warbot.
Start an MSDOS prompt and type netstat -an |findstr ":6667" (or check which port it tries to connect to in the Zonealert alert.



Good post Swede, I was thinking along the same lines. Definitely worth looking into.
Sponsored Links





Free Braindumps | MCSE braindumps software forum

Copyright 2003 - 2008 examnotes.net