Spyware Problem : eliteppy32.exe

[PrincessK]

Has anyone here had experience with getting rid of this nasty spyware? This program keeps forcing pop-ups to randomly appear on your computer, even when you have firewalls set up, NAV and anti-spyware programs running. As long as you have an internet connection, it will find a way to creep in.

I've tried installing Ad-Aware and HiJackThis as anti-spyware programs to delete and quarantine. However, to no avail. I cannot find the .exe file on my computer to delete, and it doesn't appear in my Programs List.

If anyone has experience dealing with this particular spyware program, please let me know - THANKS! :confused:

[Shaf]

Try this - http://www.webuser.co.uk/cgi-bin/forums/showflat.pl?Cat=&Board=hijackthis&Number=165001&page=1&view=collapsed&sb=5&o=93&part=

[PrincessK]

Yup, i've been to that site already and followed the instructions (did the google search). Unfortunately, like I said, the .exe file cannot be found in my hard-drive, so I cannot delete it.

My guess is that it's hidden somewhere under an alias name.

Any other suggestions? Thanks...

[PrincessK]

bump for anyone who can help me!

[LuckyOne]

I know this is pretty basic.... but make sure 'system restore' is turned off in Windows XP or all your removal attempts will be pointless. Then run Hijack This!, and delete anything unknown. Cut and paste suspicious entries from Hijack This! into google if you don't know what they are. Just type 'what is' and the suspicious registry entry if you are not sure.

Again, make sure system restore is off, and you are not online.

[Jaytee]

I spent a few hours trying to remove that malware on my friends machine after he ran a program that was linked through MSN. I tried everything I could think of and then gave up. I couldnt figure out which files were causing the problem. I killed every unneeded process on the machine. I stopped every unneeded service on the machine. I ran three different spyware programs and norton anti virus. The spyware program would clean most of it but not everything because it said the files were locked which is why I killed the processes.

I remember seeing eliteppy32.exe which I was looking for in the system32 but didnt find it. I will try nuking it in safe mode like that person suggested.

Nastiest malware I've ever seen.

Windows really needs to display which processes are locking which files. It drives me crazy when I get a error messages saying the file is locked. Well which damn program/process is locking it. Windows should also display which processes are being run by what program.

Stupid Windows. Im going to go look for my Commodore 64.