Multipule Explorer.exe using a lot of memory.

Thanks for the cam shots.

I'll step back and let Icit2lol walk you thru the Ubuntu stuff. I that works, that's great... you don't need to to the other stuff in my post. If you hit a dead end, then you can try my suggestions.

It will save us all from going batty :)

Bill
.

the 1st screenshot says it all.

Now the tricky part. Do you have a Repair disc or Win7 install disc?

You would have created the reapir disc from Start Menu -> Maintenance so you'd probably remebr doing that.

No Repair disc or install disc?

No problem. Find a friend with Win7 HomePrem x64 and sk them to make a repair disc for you (you buy the disc - only needs a CD-R). They must be the same bit depth (64 bit)

No friend with Win7 HomePrem x64? See if your public library or newarby University cna help you.

Failing those, plead your case to the mercy of the big box tech folks - you might find a nice tech that will help you "off the clock".

Once you have either disc - see the instructions on your screenshot above (insert disc. choose lang -> next, click repair)

You'll want to open a command prompt (cmd) and run the two utilities in cmd.

I'm heading out in a bit, see how far you get and we'll pick this up tomorrow.

Bill
.

I've been involved in a number of threads where all seemed hopeless. If you're thinking about a new machine anyway, don't let me influence that decision. I'll work with you to get this machine back in a stable state and call on other members to help if I get stuck.

If you decide it's better to get a new machine and recover your data, let me know and I'll switch gears. All is not lost, yet...... we're really only in the beginning stages trying to access the drive. You are collecting the tools you need to accomplish that and it does take some time to prepare and even longer to repair. The choice is your, just let me know what direction you want to take.

In either case, fix the current machine or get a new machine, you will have to get to your data.

I'm still on the fix this machine track.

There are a few other tacts you can take

• Use the Kaspersky Rescue disc to boot and then get to cmd. I'm not certain if OTL or ListParts will run in that boot, but it's worth a try.
  -
• Make a Windows 7 install DVD or USB from official MS ISO. Then use that to boot up and get to the repair options.
  
  
  
     Note

  If you do not have a Windows 7 with SP1 installation DVD/USB, then you can download the latest official Windows 7 with SP1 ISO file here: Microsoft: Windows 7 Direct Download Links, and use Windows 7 USB-DVD Download Tool to create a bootable DVD or USB flash drive with the ISO to do the clean install with.
  
  
  • You want this ISO: X17-58997.iso - Windows 7 Home Premium x64 SP1 U (media refresh)
  • It's fairly easy
    
    • Download the Win7 ISO
    • Download the tool
    • Run the tool and point to the Win7 ISO and tell it whether you want to make USB boot or DVD boot install media.

Bill
.

I backtracked to post 1 and researched some of your inofrmation.

uhobco / ienmeramkel antibibus: seems to be a rootkit and part of a botnet called ZBot
There's a Google reference in the search results for uhobco.exe:
Sites Banned for Illegal Sex Acts as of: 2010-28-04. Removed from the Google index

Who knows what the bug did to your machine. I will say this though. regardless of your decison to proceed fixing this machine or get a new machine, you need to change all of your passwords on all sites - especially finanacial and other sensitive inofrmation sites. This must be done on a machine that is not infected!

For emphasis: On a clean machine you need to change all of your passwords on all sites - especially finanacial and other sensitive information sites

Bill
.

StevenMax said:

Been a long weekend with this issue for me, so excuse my previous post.

I'm in the process of burning the Win ISO will update the post after I run the repair options.

Thanks everyone. I sincerely do appreciate it all.
- Steve

No problem Steve. I understand these issues can be quite frustrating.

Ok, so you ran repair using the ISO mediand you can boot normally - correct?

Back to IE Windows Explorer behaving badly.


I'd like to see the OTL and Listpart outputs. OTL will tell me a lot about the services and applications. Looks like I'll have a lot of reading to do.

Please run those two utilities and post the output.

And then I'd like you to do a quick malware scan on your system.

Download Malwarebytes Anti-Malware Free (click here to download, select the free version)
"Save as" the install package to your Desktop
Double click the mbam-setup file on your desktop to install and run Malwarebytes (Mbam)

Answer YES to all authorization prompts and then follow the Mbam setup prompts.
Do not make any changes to default settings.
When the install is finished, verify that only the following two options have checkmarks,
change to match if necessary.
[a] Update Malwarebytes’ Anti-Malware
[a] Launch Malwarebytes’ Anti-Malware

Make sure that there is NOT a checkmark next to:
[ ] Enable free trial of Malwarebytes Anti-Malware PRO

Then click the Finish button.

Allow Mbam to update, then
Select Perform Quick Scan from the options on the Scanner tab, then
Click the Scan button.

After the scan is complete
Click on Show Results
A window displaying any detected malware is shown
Select all malware (make sure all objects are ticked [a]), then
Click on Remove Selected

The Mbam report file pops up in your text editor when Mbam has completed the removal process.

Select all of the text in the report (Ctrl+A) and paste the text in a new post on this thread.

   Note

If MBAM encounters a file that is difficult to remove, you are asked to restart the computer.
The restart is REQUIRED to allow Mbam to complete the removal of the malware.
Failure to restart means that the malware is still present on your machine.

You want to restart in Normal mode, not in Safe mode.