Some type of IE related Virus?

[Dbl21]

Hello Everyone,

Looks like I have some type of IE related virus.

In the C:\Users\Owner\AppData\Local\Temp directory I am getting
random exe's created and then executed as running processes.

Always the same. A valid exe filename program is created and then
3 processes are started. Seems to be IE related as I also get a
subfolder created that contains additional subfolders of AppData
and Microsoft.

I can manually kill the three running instances and then delete everything
in the directory but 10-20 secs later another exe is created and then
3 instances of that will start.

The created EXE files are always 100k in size. A couple examples of the files
that have been created are

DeviceProperties.exe
mmc.exe
Magnify.exe
MakeCab.exe
Xpsrchvw.exe


Malware Antibytes, Security Essentials, TDSKiller do not find anything. When
I scan the created exe files with Malware Antibytes and Security Essentials
then dont detect anything.

System is Win 7 64 bit SP1 Home. Currently running IE 9.

I am also having a issue installing the latest Windows Updates. Failing on
.NET and IE updates.


Any ideas appreciated.

Thanks

 

[tashi]

Hello Dbl21,

To request assistance in the malware removal forum please see the FAQ which includes guidelines in post #1 and instructions in post #2 on how to provide the preliminary DDSand aswMBR logs used for analysis.

http://forums.spybot.info/showthread.php?t=288

Then start a new topic providing the logs so a volunteer analyst may advise when available.

Best regards.