Why a Legitimate File Marked as Dangerous
- Microsoft Internet Explorer file is 100% good and clean.
But it is marked as bad.
- Double-click on the "IExplore.exe" item.
Check the status:
The executable file is 100% good, but it is used for malicious actions.
- Inspect the full command line.
You can see the red text after "iexplore.exe".
These are the parameters.
"Dinoraptzor.org" marked as red, because this is a malicious web site.
- Internet Explorer process is used to start the web site "dinoraptzor.org".
Dinoraptzor.org executes the scripts and redirects you to an advertising web page.
This is a well-known trick, used by the bad actors.
- Click the "Check File" button to be sure that "iexplore.exe" is a fully legitimate file.
- Never delete the good files!
You need to kill the iexplore.exe process to stop display advertising information.
- Next, you need to find out how the iexplore.exe with Dinoraptzor.org was created.
Usually, this process is created by a scheduled task or startup command or by another malicious process.
To check this out, just jump to 4th tab - "Startup Programs"
