I have a laptop here that came to me in very poor shape.
I ran Ad-Aware, Ewido, Spybot S&D on it as well as several iterations of HijackThis.
What was and is still going on is this:
In safe mode, explorer.exe runs fine for the Administrator account although there are still pop-ups (yes in safe-mode)
In the clients account though (safe-mode and regular mode), explorer.exe never really shows up. In Task Manager it is there, but is just taking up 100% of the CPU without ever loading.
I've tried several walk throughs found on forums for various spyware, but the problem still remains and I am not exactly sure what the culprit's name is.
The only resilient file that I can't unregister or delete even with KillBox is wzhatm.dll which does not show up in a web search, so I don't know what variant is causing the problems.
My HJT log is posted below and any help is greatly appreciated.
<< HiJack This log removed by Humeniuk PE >>