Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Explorer.EXE is this a virus???

28 Nov 2011   #1
Kaaz

Windows 7 Home x64
 
 
Explorer.EXE is this a virus???

Every time I go to change a feature to my computer for example uninstalling a program my User Account Control window pops up asking me if I would want to allow the following program from an unknown publisher to make changes to this computer?

Program name: Explorer.EXE
Publisher: Unknown
File origin: Hard drive on this computer

I ask b/c I can't recall my computer ever doing this before Norton has Quarantined it due to suspicious behavior detected and if it is Norton states that the program has been blocked and removed and yet it still pops up each and every time I try to change something.... Norton shows file actions...
File: c:\windows\syswow64\explorer.exe
Removed

it also states the Origin as
Source File:
7tsp_gui_v0.3_b(3003).exe
File Created:
explorer.exe


My System SpecsSystem Spec
.
28 Nov 2011   #2
Unrealmaster287

Windows 7 Ultimate x64
 
 

Could you please post a screen shot of such a prompt

Explorer is not a virus (unless infected) it is the shell you see when you go to desktop when you open a folder so it is in essence the interface of windows.
If a modification was made to the explorer e.g. changing the staring logo etc then it is normal that it will start to display
Program name: Explorer.EXE
Publisher: Unknown
File origin: Hard drive on this computer

For me as well after i used windows orb changer so yeah you are not the only one!

I hoped this helped
My System SpecsSystem Spec
28 Nov 2011   #3
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Have you downloaded and installed any 'theme packs'?
My System SpecsSystem Spec
.

29 Nov 2011   #4
Kaaz

Windows 7 Home x64
 
 

I have downloaded and installed theme packs & Ive changed my starting logo and orb... Moments ago I experienced my first blue screen. I restarted my computer everything seems to be working ok but Im not sure, Im totally not in any way shape or form a computer expert. Thinking if this is a virus I should restore my computer to an earlier date... Thing is, its only showing a restore point of 11/27. When I click on the box to show more dates nothing changes. Im clueless as to what to do next???
My System SpecsSystem Spec
29 Nov 2011   #5
seavixen32

Windows 7 Ultimate SP1 64-Bit
 
 

First, I'd be inclined to uninstall any theme packs you've installed.

Next, download the free version of Malwarebytes and run a full virus scan.

Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer
My System SpecsSystem Spec
29 Nov 2011   #6
vrosa

Windows 10 Build 9926
 
 

Probably it's infected or like others already said here maybe the theme pack you've installed.
My System SpecsSystem Spec
29 Nov 2011   #7
Kaaz

Windows 7 Home x64
 
 

Thank you seavixen32. I will do that and report back. In the meantime I was directed to the BSOD forum and followed those instructions there and was advised to post my reports of the BSOD dump & system files collection along with the system health reports in a zip file here.

OS Name Microsoft Windows 7 Home Premium
Version 6.1.7601 Service Pack 1 Build 7601
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Manufacturer Hewlett-Packard
System Model 310-1124f
System Type x64-based PC
Processor AMD Athlon(tm) II X2 240e Processor, 2800 Mhz, 2 Core(s), 2 Logical Processor(s)
BIOS Version/Date American Megatrends Inc. 6.03, 11/30/2010
SMBIOS Version 2.6
Installed Physical Memory (RAM) 4.00 GB
Total Physical Memory 3.75 GB
Available Physical Memory 1.70 GB
Total Virtual Memory 7.50 GB
Available Virtual Memory 5.07 GB

Reports.zip


My System SpecsSystem Spec
29 Nov 2011   #8
Kaaz

Windows 7 Home x64
 
 

I ran the full Malwarebytes scan and received this msg...

Broken.OpenCommant | Registry Data | HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default)...
" " HKEY_CLASSES_ROOT\regfile\shell\open\command\(default)...

-Was this just a glitch or something else or am I being too paranoid?!?!
My System SpecsSystem Spec
29 Nov 2011   #9
Unrealmaster287

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Kaaz View Post
I ran the full Malwarebytes scan and received this msg...

Broken.OpenCommant | Registry Data | HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default)...
" " HKEY_CLASSES_ROOT\regfile\shell\open\command\(default)...

-Was this just a glitch or something else or am I being too paranoid?!?!
I am no Malwarebytesbytes expert but i can tell you this, no one program is 100% accurate at scanning threats, restricting yourself to scanning using one program is dangerous
If i were you i would use Malwarebytes, Avira removal tool, and Kaspersky Virus Removal Tool.

Use those and post the results

Finally there is nothing wrong with being nit picky and paranoid about your system when it comes to protection

I hope this helps
My System SpecsSystem Spec
29 Nov 2011   #10
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Download CKScanner from here http://downloads.malwareremoval.com/CKScanner.exe
Save it to your desktop. <=== IMPORTANT
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify that the file is saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.
My System SpecsSystem Spec
Reply

 Explorer.EXE is this a virus???




Thread Tools




Similar help and support threads
Thread Forum
Infected by an Explorer virus
Hi Seems like I've been infected by an IExplorer virus that first causes the the browser to crash and eventually slows down my entire system. I first started when I got a popup window asking me to update flashplayer.exe that kept popping up similar to this one. I tried everything including a...
System Security
explorer will not start after having ukash virus
last week i got the ukash virus. i did a restore point, ran several malware detection progams and have got rid of the virus but now explorer will not start flashes white then disappears. i think the problem is some files were corrupted. this is the missing files how do i find then and reinstall...
System Security
explorer.exe using over 70,000k of memory..Virus?
Hey im wondering if someone can give some advice as I think I might have a virus. I read this on bull-guard forum (my antivirus software) The explorer.exe is a process; however, it is also a Trojan. cexx.org has an excellent removal process at this link: Advertising Spyware: DLDER.EXE,...
System Security
Explorer Will Not Load, States Explorer.exe Contains Virus
I am currently in safe mode now, but each time I boot normally, I only get a blank screen with a cursor. When i ctrl/alt/del I see other processes necessary for windows, but now explorer...when i manually start it, i get the error that it contains a virus and cannot load. I've been struggling...
System Security
MSDT.exe Corrupt file virus? And explorer not working right
Hallo, I keep getting a 'msdt.exe file is corrupt' message in my system tray. I looked this up on google, and this came up as a virus/worm of some sort. Most post's were from 2009 though...Also, it seems it has messed up my explorer too, as I can't change some system settings or anything...
System Security
explorer.exe winlogon.exe virus
malwarebytes,eset find explore.exe,winlogon.exe w.dll as a virus and want to remove them, if that happens then i'll have to reinstall the windows, anyone knows how to deal with this kind of problem?
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:04.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App