Elite Bar

  • Thread starter Thread starter facku
  • Start date Start date
F

facku

This spyware isn`t detected by Microsoft antispyware, it
hides to explorer and taskmanager.

Path of exe:

c:\winnt\system32\elitemze32.exe
 
Hi there:

There seems to be a couple of variants and/or other files
involved with Elite Bar. There was a previous post
regarding an eliteusc32.exe file as well.

Did you try a full scan in Safe Mode?

Ron Kinner recommended Pocket Killbox and also send him a
HijackThis log.

Pocket Killbox
http://www.bleepingcomputer.com/files/killbox.php

From RK himself:

"Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the
subject so I'll know it's not spam.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)"
 
If you have the MSAS working, please submit a tools,
suspected spyware report to Microsoft.

I would also recommend the following:

If you are running SP2, open IE--->Tools--->Manage Add-
ons, and uncheck any BHO's that you don't recognize.

I like BHODemon available from www.majorgeeks.com to
monitor BHOs.

Run msconfig and go to the Startup Tab. There you can
disable anything you don't know from starting up. To
permanently delete the entry open MSAS, go to Advanced
Tools > System Explorers > Startup Programs. Select the
programs you want and click permanently remove startup
program.

Clean out your temp files manually per Ron C:

Boot into Safe Mode (F8) at startup;
Empty your temporary files AND your Temporary Internet
Files* C:\Documents and Settings\Username\Local
Settings\Temporary Internet Files folder

Also what I respectfully refer to as Plun's Quick Fix:

From Plun:

"Submit a tools, suspected spyware report.
Download/Install CCleaner, www.ccleaner.com
Download/Install Lavasoft's AdAware SE
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-
8022-10319876.html?tag=list
* Also watch the video from Cnet about Adware within page
for best result.*
Restart in safe mode, press F8 during reboot
Run CCleaner and remove all temporary junk.
Run Adware SE
Run MSAS
Restart"

These steps should throughly clean up your computer. I
would then run the HiJackThis and send the Log to Ron
Kinner to see if everything has been found.

Hope these ideas help.

RobbieA
 
Back
Top