EliteBar removal

Hi, cannot get rid of popups caused by what I believe is part of EliteBar that keeps regenerating itself in the registry at HKEY Local Machine\Software\MicrosoftWindows\Current version\run

It is called elitexhi32.exe

I have tried the manual removal solution posted earlier on this site, but to no effect.  The DLLs which I am supposed to unregister do not exist according to Regsvr32 /u command.

I have run SpyBot, PestPatrol, HiJackThis, CWShredder, AdAware in both Windows and Safe Mode and deleted anything found.  HiJack this will detect it and I select Fix, but less than 2 minutes later the file pops back up in the registry and the ads return.

Any ideas?  Thanks.
AA095927Asked:
Who is Participating?
 
rossfingalCommented:
Hi!

Just remembered this - here's a utility that may work:

Please download miekiemoes' LQfix batch here:
http://users.pandora.be/bluepatchy/LQfix.zip
Unzip it to the desktop but do NOT run it yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml

Once in Safe Mode, please run LQfix.bat.  When finished, restart your computer in normal mode.

Hope this helps.
RF
0
 
dis1931Commented:
Did you check your services?  Sometimes spyware will install a service which regenerates these files.  You may need to stop or uninstall this service.
0
 
Rich RumbleSecurity SamuraiCommented:
Using Xp or winME? Turn off system restore, then scan with ad-aware or spybot
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
-rich
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
caza13Commented:
Are you able to find and delete the file elitexhi32.exe, or do you get an "access denied" message?  What folder is it in?  If you can remove the files and registry settings, do they return if there is no connection to the internet?  
0
 
greyknight17Commented:
OK, this EliteBar could be a pain to remove.  But there is a tool that should remove it most of the time.  Download this program:

http://www.simplytech.it/ETRemover/ETRemover_V123.zip

Unzip it.  Boot into Safe Mode by restarting and hitting the F8 key (or F5 in some systems) and then choose Safe Mode.  Now run that ETRemover.exe that you just unzipped.

Restart and you should be ok now.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.