explorer.exe patched with something ?

[COLL911]

i used tcp view to monitor applications connected to internet to make sure any my pc doesn't connect to any unwanted ip. For the past few days it has been showing bombs of explorer.exe with status syn_sent to some ip. A few days back it was just appearing in TCPview with no status. In it process properties it shows

Path
C:\WINDOWS\explorer.exe
Command Line
something from documents and settings

When i accessed the folder it showed executable appications with differtent names made up of letters with the description Hdbje Application

I tried reinstalling the windows but that doesn't help for more than a 2 or 3 days. The same files start appearing in the folder again

i tried scanning the hard disk with the latest avg but it found no virus.

AVG did stopped explorer from appearing in tcp view but it ****ed up my computer speed.

Is there anyway to get rid of this virus without having AVG or any other software to be running at all times ?

 

[johnb35]

Please follow the instructions in this thread, most likely you are infected.

http://www.computerforum.com/131398-important-please-read-before-posting.html

Please post the requested logs after running both programs with Malwarebytes ran first.

 

[massoud raji]

I installed Windows XP last week and now, I find eight Hdbje Applications in My Documents and Settings.