Genuine Win file?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

PAT (Paul) - 29 Jun 2005 21:39 GMT

Is iexplore.exe a genuine Win file? Two years ago you gave me a link to a
site where one could find out, but I cant find it. Would you oblige please.
(PAT) Paul

Signature

cogito ergo sum

Reply to this Message

David H. Lipman - 29 Jun 2005 21:48 GMT

From: "PAT (Paul)" <PATPaul@discussions.microsoft.com>

| Is iexplore.exe a genuine Win file? Two years ago you gave me a link to a
| site where one could find out, but I cant find it. Would you oblige please.
| (PAT) Paul

It is *IF* it is in C:\Program Files\Internet Explorer" If it is %windir% or
%windir%\system32 then it is a Trojan or virus.

BTW: Who are you talking to wihen you use "...you gave me a link ..." ?

Signature

Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Reply to this Message

Mike M - 29 Jun 2005 22:13 GMT

> It is *IF* it is in C:\Program Files\Internet Explorer" If it is
> %windir% or %windir%\system32 then it is a Trojan or virus.
>
> BTW: Who are you talking to wihen you use "...you gave me a link
> ..." ?

Perhaps Paul was looking for Microsoft's DLL Help
(http://support.microsoft.com/dllhelp/) however this is of less use to
those running Win Me than in the past since whilst it still contains
details for Internet Explorer and Windows Media Player it no longer
includes Win Me's files.

Signature

Mike Maltby MS-MVP
mike.maltby@gmail.com

Reply to this Message

Shane - 30 Jun 2005 00:31 GMT

>> It is *IF* it is in C:\Program Files\Internet Explorer" If it is
>> %windir% or %windir%\system32 then it is a Trojan or virus.
[quoted text clipped - 7 lines]
> details for Internet Explorer and Windows Media Player it no longer
> includes Win Me's files.

Really, Mike?

I suppose you have the originals on DVD. I do still have the list in 240KB
.xls or 569KB .doc, if anyone needs it.

Shane

Reply to this Message

Mike M - 30 Jun 2005 00:49 GMT

> Really, Mike?
>
> I suppose you have the originals on DVD. I do still have the list in
> 240KB .xls or 569KB .doc, if anyone needs it.

Shane,

Nope, I don't have a copy of the Microsoft DLL database used by DLL Help.
I've always used the on-line site when wanting to check for the origin of
specific file version. What I do have is the contents of the various Win
Me cab files as these are still available as KB articles.

Signature

Mike

Reply to this Message

PAT (Paul) - 30 Jun 2005 02:44 GMT

Dave: tks for responding, as well as Mike and Shane, and might as well
include Jack and Webster72n who did in the past for the same: "is so and so a
genuine Win file? which seems to be a favorite of mine.
Dave, you are taxing my memory. When I say "you" gave me etc... it means
one of more of you gents answered my questions and if I remember right one
link took me to some sort of Startup lists which had the variants. In this
exemple My grand son had: C:\program files\Internet
Explorer\iexplore.exe...in his XP SP!, sooo I should have asked in that
forum, but since I use WIN Me, you guess the rest.
He sent an HJT log and the matter is confirmed: delete it.
regards to all, Paul

Signature

cogito ergo sum

> From: "PAT (Paul)" <PATPaul@discussions.microsoft.com>
>
[quoted text clipped - 6 lines]
>
> BTW: Who are you talking to wihen you use "...you gave me a link ..." ?

Reply to this Message

David H. Lipman - 30 Jun 2005 03:03 GMT

From: "PAT (Paul)" <PATPaul@discussions.microsoft.com>

| Dave: tks for responding, as well as Mike and Shane, and might as well
| include Jack and Webster72n who did in the past for the same: "is so and so a
[quoted text clipped - 7 lines]
| He sent an HJT log and the matter is confirmed: delete it.
| regards to all, Paul

The file; "C:\Program Files\Internet Explorer\IEXPLORE.EXE" is certainly legitimate
unless it was replaced. However I don't know of any infector that replaces this file and if
it was a "true" virus then other files in the OS surely have that virus as well.

When in doubt, submit the suspect file to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.

Signature

Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Reply to this Message

PAT (Paul) - 30 Jun 2005 20:41 GMT

Dave:
Sorry for the misunderstand, Simon gave me this information over the
phone, and didnt keep the HGT log. He thinks the syntax of the file was
something like this: C:IEExplore.exe and the only thing he got from them is
that is was caused by a W32 ----Worm. Thats the best I can do. His putor
works fine, must say that two other files were removed. Thanks for the links.
He sends his thanks and I add mine for your time.
Paul

Signature

cogito ergo sum

> From: "PAT (Paul)" <PATPaul@discussions.microsoft.com>
>
[quoted text clipped - 17 lines]
> http://www.virustotal.com/flash/index_en.html
> The submission will then be tested against 18 different AV vendor's scanners.

Reply to this Message