Edeneye
asked on
Cannot Rid Computer Of Last Bits Of Spyware ... Help Greatly Appreciated
Hello,
I have a laptop here that came to me in very poor shape.
I ran Ad-Aware, Ewido, Spybot S&D on it as well as several iterations of HijackThis.
What was and is still going on is this:
In safe mode, explorer.exe runs fine for the Administrator account although there are still pop-ups (yes in safe-mode)
In the clients account though (safe-mode and regular mode), explorer.exe never really shows up. In Task Manager it is there, but is just taking up 100% of the CPU without ever loading.
I've tried several walk throughs found on forums for various spyware, but the problem still remains and I am not exactly sure what the culprit's name is.
The only resilient file that I can't unregister or delete even with KillBox is wzhatm.dll which does not show up in a web search, so I don't know what variant is causing the problems.
My HJT log is posted below and any help is greatly appreciated.
Thanks,
Edeneye
<< HiJack This log removed by Humeniuk PE >>
I have a laptop here that came to me in very poor shape.
I ran Ad-Aware, Ewido, Spybot S&D on it as well as several iterations of HijackThis.
What was and is still going on is this:
In safe mode, explorer.exe runs fine for the Administrator account although there are still pop-ups (yes in safe-mode)
In the clients account though (safe-mode and regular mode), explorer.exe never really shows up. In Task Manager it is there, but is just taking up 100% of the CPU without ever loading.
I've tried several walk throughs found on forums for various spyware, but the problem still remains and I am not exactly sure what the culprit's name is.
The only resilient file that I can't unregister or delete even with KillBox is wzhatm.dll which does not show up in a web search, so I don't know what variant is causing the problems.
My HJT log is posted below and any help is greatly appreciated.
Thanks,
Edeneye
<< HiJack This log removed by Humeniuk PE >>
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks War1.
I thought I had looked at the file permissions early on, but I must not have.
Made me feel pretty dumb, but the file was set to read only! Sheesh :-/
Thanks for having me look that over again,
Edeneye
Humeniuk,
Sorry about the HJT post. Last time I posted here (a while ago) people were asking me to post HJT logs. My bad.
Edeneye
I thought I had looked at the file permissions early on, but I must not have.
Made me feel pretty dumb, but the file was set to read only! Sheesh :-/
Thanks for having me look that over again,
Edeneye
Humeniuk,
Sorry about the HJT post. Last time I posted here (a while ago) people were asking me to post HJT logs. My bad.
Edeneye
Glad the problem is fixed.
Once spyware is remove, use System File Checker to fix your computer. Go to Start > Run and type
sfc /scannow
You will need your Windows CD
If you cannot get your explorer.exe back, you will to do a reinstall of Windows.