prolem: when starting ieExplorer, it creates bfeq.exe in my startup folder.

  • Thread starter Thread starter John Fang
  • Start date Start date
J

John Fang

Hi guys,

I'm having a problem with a file called bfeq.exe. Don't know here this file
comes from. I suspect it to be either a virus or some sort of spy ware. So
I deleted it from the startup folder. To my surprise this exe will
re-appear after I rebooted my pc. I've checked all the "run" and "runonce"
registry keys and I dont' see it. After more testing, I was able to
determine that this exe will be created when I run ieExplorer.

When I start ieExplorer, it will first create a VBAxxx.tmp file which is of
the same size as the bfeq.exe. then it loads the bfeq.exe into a new
process. I'm not sure if ieExplorer copies the file to the startup folder
first or loads it into a new process first, but the end result is bfeq.exe
is running under "processes" tab in task manager and a copy is in the
startup folder.


Does anyone have a clue on where I should check to see what ieExplorer is
loading that would do this?

Thanks.

John
 
John said:
Hi guys,

I'm having a problem with a file called bfeq.exe. Don't know here
this file comes from. I suspect it to be either a virus or some sort
of spy ware. So I deleted it from the startup folder. To my
surprise this exe will re-appear after I rebooted my pc. I've
checked all the "run" and "runonce" registry keys and I dont' see it.
After more testing, I was able to determine that this exe will be
created when I run ieExplorer.

When I start ieExplorer, it will first create a VBAxxx.tmp file which
is of the same size as the bfeq.exe. then it loads the bfeq.exe into
a new process. I'm not sure if ieExplorer copies the file to the
startup folder first or loads it into a new process first, but the
end result is bfeq.exe is running under "processes" tab in task
manager and a copy is in the startup folder.

Does anyone have a clue on where I should check to see what
ieExplorer is loading that would do this?

Thanks.

John
Click to expand...

Another person was having tha same problem and was discussing in
windowsxp.general forum on July 5/6th but I did not see any resolution.
I used Google search and found it in the Groups area.

Might be a new parasite so go to the HijackThis Web site and follow the
directions.
http://www.tomcoyote.org/hjt/
 
I'm checked out google on this and there was no resolution posted.

Something is hooked into ieExplorer that causes this exe to be created when
ieExplorer is launched.
I was wandering if anyone knows of where I should check for these hooks.

Thanks.

-John
 
I am not sure where it is coming from if you have removed it from the
Startup folder but try this:

Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

....Alan
 
Back
Top