Expoler.exe

Hey guys, need help with a worm or trojan that calls itself Expoler.exe, its preventin explorer.exe from running so therefore i have no toolbar, im running everything taskman and rocketdock, AVG has picked up nothing after 2 scans, i have deleted it rfrom the registry and the folder its stored and i try to terminate the process but it just comes straight back again.

i have tryed another av called malbytes somethin somethin, and that found it and deleted it but came back straight away, if any1 has had this virus or knows how to get rid then please reply

thanks ::DD

I don't know. But i found some information on google:

expoler.exe (sober worm) - Details
If your pc has the expoler.exe process on it, your system might be infected with a worm that goes by the name of sober.
expoler.exe is considered to be a security risk, not only because antivirus programs flag sober worm as a virus, but also because a number of users have complained about its performance.

http://en.wikipedia.org/wiki/Sober_%28computer_worm%29
http://www.spyany.com/files/expoler_exe.html

and this:
The explorer.exe is a process; however, it is also a Trojan. cexx.org has an excellent removal process at this link: http://www.cexx.org/dlder.htm

We've found multiple infections in a few machines over the years. It's known as the dlder.exe Trojan and it drops another "explorer.exe" file in a separate folder, normally in 'C:\Windows\explorer\Explorer.exe'.

Please note that you have a legitimate original "explorer.exe" in 'C:\Windows\explorer.exe'

It also drops a startup file in your registry so it will run silently at startup...normally in your Local Machine Registry: [HKLM\SOFTWARE\games\Clicktilluwin]. However; we have also found the Clicktilluwin entry in ‘HKCU’ over the past few months. That said, you should do a search find on your total registry for the phrase 'Clicktilluwin'. Go to the link above and follow cexx.org's manual removal, then search your regedit for the 'Clicktilluwin' reg-key and you should be fine.

Anytime that you have explorer.exe running over....say....25,000K to 30,000K in the task manager, it's usually indicative of infection.


this guy got the same problem:
http://www.pcguide.com/vb/showthread.php?p=441894

you might want to post there see if they can help you out.
Good luck

Well if it is running itself in a process you might want to try spybot search and destroy in safe mode 1st. The when it can not remove it because it is in a running process it will run a preprocess scan when you restart your computer maybe that will get it.
http://www.safer-networking.org/en/download/index.html