IPB

Welcome Guest ( Log In | Register )

 
Closed TopicStart new topic
> Kasp. reports suspicious behaviour, IE and Firefox stop working., LEECHLLC:MSTORR.EXE and EXPLORER.EXE related
thegrayfox
post 8.12.2009 22:23
Post #1


Newbie
*

Group: Members
Posts: 1
Joined: 8.12.2009




I've got the latest Kaspersky version running (9.0.0.736) in the background right from windows startup.

When windows starts I get 2 notifications from it:

C:\PROGRAM FILES\LEECHLLC:MSTORR.EXE
and
C:\WINDOWS\EXPLORER.EXE

are reported as:
suspicious behavior, simmilar to PDM.DNS Query
or
suspicious behavior, simmilar to PDM.Strange behaviour
or
suspicious behavior, simmilar to PDM.Suspicious driver installation
or
suspicious behavior, simmilar to PDM.Invader

Under the 'Detected Threats' tab, it shows these have a medium or low criticality.

I get 2 such messages, one for MSTORR.EXE and one for EXPLORER.EXE paired together every few minutes.

The only symptom is that after a few messages both browsers stop functioning completely.

Firefox refuses to load my homepage. When I click 'home' or press 'F5' for refresh, firefox stops completely and refuses to even check the connection. At the bottom it says 'stopped', as if whatever this is, disables firefox rather than the internet connection itself.

Similar situation with IE, refuses to load home page or even check if connection is present.

Going to network places> local area connection, windows reports it is functioning normally.

Applications that use the internet, other than browsers refuse to work, however active downloads or video streams that began before the messages popped up continue.

On restart, all functionality is restored.

I did a full scan with both Kaspersky and Spybot, both revealed a couple of items, but on removal the problem continued.

As far as I know, EXPLORER.EXE is used to work in windows, I have no idea what MSTORR.EXE does. I checked program files and couldn't find MSTORR.EXE or anything like 'LEECHLLC'.

A google seach for these yields few results.

I'd appreciate any help you guys could provide.
Go to the top of the page
 
+Quote Post
richbuff
post 9.12.2009 03:15
Post #2


Are You Kidding?
*****************

Group: Global moderators

Posts: 1000473
Joined: 14.06.2007




Welcome. Please supply both of the two following items:

1) Please create gsi sysinfo text, and then upload it to this parser site: http://gsi.kaspersky.fr/ and then post the link to the GSI report which may identify issue area,
instructions see: http://forum.kaspersky.com/index.php?showtopic=36444 Please use the New 4.0 GSI utility. If Vista, right click getsysteminfo.exe and select Run as administrator.

2) Please attach the zipped virusinfo_syscure.zip; instructions, see: http://forum.kaspersky.com/index.php?s=&am...st&p=678334


--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post
734jeant
post 9.12.2009 22:20
Post #3


Newbie
*

Group: Members
Posts: 1
Joined: 9.12.2009




Hello,

I've been having the same problems with my internet not responding. I ran TrendMicro Housecalls and it found this "threat" LEECHLLC:MSTORR.EXE. I removed it but it has not solved the problem. Have you found a solution? Thanks.
Go to the top of the page
 
+Quote Post
richbuff
post 10.12.2009 05:11
Post #4


Are You Kidding?
*****************

Group: Global moderators

Posts: 1000473
Joined: 14.06.2007




Welcome.
QUOTE
I've been having the same problems...
Please post the same items that were requested in my previous post.


--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post

Closed TopicStart new topic

 



Lo-Fi Version Time is now: 26.11.2014 17:49