Multiple iexplore.exe processes running

Gareth McKee
Gareth McKee used Ask the Experts™
on
Hi All,

background:
Windows Server 2003 environment, running over 7 Citrix servers.
Recent Internet Explorer 8 install with latest updates/patches/fixes
Sophos Antivirus

Throughout the day i am getting users report that their system is very slow/sticky. Upon investigating their logon i find they have in the region of 20 or so iexplore.exe processes running on their logon, even if they don't have internet explorer open. This is in turn taking up all of the servers CPU which then affects everyone else on that server

I have updated the servers to the latest Windows files, updated IE, uninstalled and reinstalled IE8, run virus checks and malware checks and so far nothing has been successful.

Any thoughts/ideas greatly appreciated!

Many Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Irwin SantosComputer Integration Specialist

Commented:
Sounds like you have malware running on your workstations.

Visit this link, download and install HIJACKTHIS (TOP Right corner has the file link)
http://hijackthis.de/

Install on the affected machine and run the scan.  Copy and paste the text into the white box on hijackthis.de, then click analyze.  Look for NASTIES.  If you have a few pop-up, then you're infected and need to fix those registry entries.

Post back your results.
Top Expert 2015
Commented:
Use two different admin accounts and clean as good as you can with Spybot S&D
If some malware is stronger you might need other tools.
Gareth McKeeCEO/Owner

Author

Commented:
Hi all,

thanks for your responses.

I have installed and run HijackThis across all my servers, which didn't come up with any "nasties". I have had to uninstall IE8 for now as it was affecting my users ability to work during the day! However, I have run Spybot S&D to clean everything up which did pickup a few things and cleaned them up without a problem.

If/when i install IE8 (or an alternative web browser) i will see if we have the same problem again

Top Expert 2015

Commented:
check with http://live.sysinternals.com/autoruns.exe
something starts iexplore....

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial