EHWAZJ.EXE & CERES POPUP - Can anyone help remove

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by zoglogic, May 18, 2005.

  1. zoglogic

    zoglogic Private E-2

    i am constantly tuning up my old computer at my sisters house, her kids are just dowloading all kinds of junk... anyways... there are 2 things i cant seem to get rid of... one is the ehwazj.exe that adaware found... it keeps reinstalling after reboot... second is the ceres popup - that is a frustrating little bastard... cant seem to remove that aswell... adaware has found the .dll but it reloads after reboot...

    i am scanning as we speak in safe mode...windows 98 and we'll see what happends...

    i will be scanning with the following
    adaware
    spybot search&destroy
    trendmicro online scan(if my ethernet driver works in safemode)
    ccleaner(fix issues, startup, clean out unwanted)
    and thats about it...

    i can run hjt but at this point i wont do this...

    let me know whats next.

    also... the ehwazj.exe - cant find any hits on google...

    my notebook and i are standing by

    lata
     
    zoglogic, May 18, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow all the steps in the sticky thread:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, May 18, 2005
    #2

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds