Problems with elitemwb32.exe

Discussion in 'Malware Help (A Specialist Will Reply)' started by MIGNON, Jun 10, 2005.

  1. MIGNON

    MIGNON Private E-2

    Hi!
    A friend of mine really needs help... She has problems with her internet connection... she can't go online, so I read the stuff about malware and I downloaded the software you were telling about... it was useful, but she still has problems with elitemwb32.exe... I removed it in save mode from the system folder... but adaware (actually adwatch) is still trying to get the permission to allow elitemwb32.exe to enter the registry... Although I blocked it I found it again in the registry...

    Pleaseeeee help us!

    P.S. we couldn't update the software, because she can't go online... I belive one of the .dll is modified, but I really don't know which one....


    THANK YOU!!!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    First you are going to need to disable (or possible uninstall) Ad-watch while fixing this. It can sometimes block the registry changed that you will need to make.

    You need to remove the registry entry that loads this at startup. Easily found in a HijackThis log.
    You then need to boot into safe mode and delete not only the elitemwb32.exe file but you need to look for other files that begin with elite and end in exe. There can sometimes be as many as ten of them.

    You may want to consider working thru our full cleanup procedure given below. (Note: Please do not post a HijackThis log here without it being reuqested and without having first run through the cleanup procedure).

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. MIGNON

    MIGNON Private E-2

    THANK YOU GUYS!!!

    elitemwb32.exe is gone... (like several other trojans and viruses)... =) we had luck to get online and update the software, so we found a lot of bad stuff =) but now is everything fine...

    THANKS again!!!

    we love you all
    =)
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds