Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Microsoft Corporation to which they should belong.
iexplore.exe security and file info
Internet Explorer
- Microsoft® Windows® Operating System
- Microsoft Corporation
 |
 |
 |
| Filetype : executable |
An executable file is a program that can be executed in your windows environment.
|
|
What is iexplore.exe?
Iexplore.exe is the process for Microsoft Internet Explorer. The following is a screenshot of Internet Explorer 6 in Windows XP:

This process is a nonessential process and can safely be killed. By killing it, however, one or more Internet Explorer windows will be closed and any data within lost. The screenshot below illustrates how this process should appear in the task manager:

In the above screenshot, iexplore.exe is running as the current user (Mike); it is typically not run as SYSTEM or any other user.
Dangers of iexplore
As this is a common legitimate process, it is common for virus writers and spyware vendors to disguise their malware as the genuine Internet Explorer.
Some malicious files will have the same name as this process but will be stored somewhere other than in %ProgramFiles%\Internet Explorer. Other malware will use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as iexplore.exe:
- W32/Forbot-AG (%SystemRoot%\System32)
- This is a worm and backdoor Trojan that connects to a remote IRC server to allow an attacker to take control of a compromised system.
- W32/Spybot-V (%SystemRoot%\System32)
- This is a backdoor Trojan that spreads over peer-to-peer networks.
- W32/Mytob-CH (%SystemRoot%\System32\iexplorer.exe)
- This is an IRC backdoor Trojan that allows a remote attacker to take over an infected system.
- W32/Rbot-EZ (%SystemRoot%\System32)
There is often multiple instances of this process running at a given time. The presence of multiple instances is not an indicator of a malware infection. Note that this process should not be running if you are not running Internet Explorer. If it is, your system may be infected with malware.
Common problems
- Internet Explorer uses 100% CPU time
- This can be caused by a spyware infection. Scan your system for spyware.
- This problem can also be caused by a misbehaved plugin. Uninstall plugins one by one until the problem goes away.
- My Internet Explorer homepage suddenly changed!
- This is a sign of a spyware/adware infection. Perform a scan and remove any spyware or adware that is found.
|
|
|
|
|
|
| MD5 File security rating |
A MD5 hash is a unique fingerprint of a file.
Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered.
Runscanner (Freeware) can help you checking the file's MD5 hashes
| Iexplore.exe files in Runscanner database |
 |
|
345 different item(s) in database |
 |
|
2 different item(s) in database |
 |
|
4 different item(s) in database |
 |
|
224 different item(s) in database |
|
 |
Green items are verified safe to use |
 |
Unrated items are not yet checked for safety. |
 |
Red items are not safe (typically virusses, spyware or other malware) |
 |
This file is digitally signed by it's publisher.
This means that the file is from the company claiming to created it, this does not mean by default that the file is safe
|
|
|
|
| General file info |
| Product name: |
Microsoft® Windows® Operating System
|
| Description: |
Internet Explorer
|
| Company: |
Microsoft Corporation
|
| Fix IEXPLORE.EXE errors: Free registry scan |
|
|
|
| Pacman startup database |
|
Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! |
|
Added by the AGENT.QG TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
|
Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
| info provided by sysinfo.org |
|
|
|
Automatic startup locations
 |
| |
 |
001 Running Processes |
| |
 |
002 Autorun registry entries local machine |
| |
 |
003 Autorun registry entries Current User |
| |
 |
004 All users startup startmenu |
| |
 |
005 Current user startup startmenu |
| |
 |
007 Roaming Start Menu\Programs\Startup |
| |
 |
008 Autorun registry entries Default user |
| |
 |
010 Installed services |
| |
 |
035 Active Setup Installed Components |
| |
 |
042 HKLM Internet Explorer Extensions |
| |
 |
043 HKCU Internet Explorer Extensions |
| |
 |
073 %windir%\Tasks |
| |
 |
135 Current User Runonce (+ subkeys) |
| |
 |
136 Local Machine Runonce (+subkeys) |
| |
 |
137 Current User RunonceEx (+ subkeys) |
| |
 |
166 HKCU Policies\Explorer\Run |
| |
 |
167 HKLM Policies\Explorer\Run |
User comments for this file
More system processes
|
|
| Filename / Process |
|
| Guid / CLSID |
|
| MD5 hash |
|
|
|
575 MD5 version(s) found
only top 10 displayed
|
|
|
| Check your autostart files
|
|
|
|