Iexplore.exe persistently opens with audio and pop-ups

Best I can tell it was in your FF. ========== GooredLog ========== C:\Program Files\Mozilla Firefox\extensions\

Actually…. I've noticed it's come back!! I turned the anti-virus package back on and iexplore.exe keeps appearing.

http://www.eset.eu/online-scanner
Go here to run an online scannner from ESET.
Click the green ESET Online Scanner button.
Read the End User License Agreement and check the box: YES, I accept the Terms of Use.
Click on the Start button next to it.
You may receive an alert on the address bar that "This site might require the following ActiveX control…Click here to install…". Click on that alert and then click Insall ActiveX component.
A new window will appear asking "Do you want to install this software?"".
Answer Yes to download and install the ActiveX controls that allows the scan to run.
Click Start.
Check Remove found threats and Scan potentially unwanted applications.
Click Scan to begin.
If offered the option to get information or buy software. Just close the window.
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic.

ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=3ca94bb3ce815646a01a24ae34258651 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2010-07-17 11:20:41 # local_time=2010-07-18 12:20:41 (+0000, GMT Daylight Time) # country="United Kingdom" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=5121 16776533 100 96 9412083 32351338 0 0 # compatibility_mode=8192 67108863 100 0 257 257 0 0 # scanned=125199 # found=0 # cleaned=0 # scan_time=5830

That found nothing.
So you're still getting this?

Recently I've noticed that IE keeps opening and playing audio adverts, pop-ups

Download Bootkit remover to your desktop
This is a rar file if you do not have a programme to open it then download and install Peazip

Extract Remover.exe to your desktop
Right click Remover.exe and select Run as Administrator
It will show a Black screen with some data on it
Right click on the screen and select > Select All
Press Control+C
Open a notepad and press Control+V

Post the resuls log here please

That found nothing.
So you're still getting this?

Recently I've noticed that IE keeps opening and playing audio adverts, pop-ups

Iexplore.exe keeps opening and turning down wave volume, yes.

Bootkit Remover version 1.0.0.1
© 2009 eSage Lab
www.esagelab.com

\\.\C: -> \\.\PhysicalDrive0
MD5: b19ee33a0168d5f0bb9afbe12e2bc035

Size Device Name MBR Status
——————————————–
149 GB \\.\PhysicalDrive0 Unknown boot code

Unknown boot code has been found on some of your physical disks.
To inspect the boot code manually, dump the master boot sector:
remover.exe dump [output_file]
To disinfect the master boot sector, use the following command:
remover.exe fix


Press any key to quit…

You might have a new RootKit / BootKit infection.

Please download MBRCheck.exe to your desktop.

• Double click MBRCheck.exe to run it
• right click on the top title bar (where program name and path is written)
• From the drop down menu chose Edit then Select All
• Click the Enter key on the keyboard > this will copy the selected text to the clipboard
• In your reply > right click in the reply window and paste the copied text

See my last post

MBRCheck, version 1.1.1 © 2010, AD \\.\C: –> \\.\PhysicalDrive0 Size Device Name MBR Status ——————————————– 149 GB \\.\PhysicalDrive0 Known-bad MBR code detected (Whistler / Black I nternet)! Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Please do the following:

• Run MBRCheck.exe
  
• Wait until you see the following line: Enter 'Y' and hit ENTER for more options, or 'N' to exit:
• Please push the 'Y' key and then press Enter
  
• When program ask you Enter your choice: enter 2 and press the Enter key
• Now the program will ask you "Enter the physical disk number to fix (0-99, -1 to cancel):"
• Enter 0 and press the Enter key.
• The program will show Available MBR codes:, followed by a list of operating systems. Please enter 3 for Windows Vista, and then press Enter.
• The program will prompt for confirmation. Type 'YES' and hit Enter.
• Left click on the title bar (where program name and path is written).
• From menu chose Edit -> Select All
• Hit the Enter key on your keyboard to copy selected text.
• Paste that text into Notepad, save it to your desktop as "MBRCheck results.txt"
• Restart your PC.
• Post the text in "MBRCheck results.txt" here, please.

[*]The program will show Available MBR codes:, followed by a list of operating systems. Please enter 3 for Windows Vista, and then press Enter.

Really? I am running XP….just checking

Sorry about that. You want XP

When program ask you Enter your choice: enter 1 and press the Enter key

I've done it, but I forgot to copy the results. D'oh! Here's what I have now… MBRCheck, version 1.1.1 © 2010, AD \\.\C: –> \\.\PhysicalDrive0 Size Device Name MBR Status ——————————————– 149 GB \\.\PhysicalDrive0 Windows XP MBR code detected Done! Press ENTER to exit…

Checking. Be right back