Three Years of Hell to Become the Devil: Ezula, I Hate You

« Not Entirely Welcome Headline Change | Main | OK, Am I Wrong, or Is It Just John Kerry? »

Ezula, I Hate You

I spent a lot of time I should have been working today fixing computers. If you're at Columbia--or indeed, using the 'Net at all--I strongly recommend that you read my update about Ezula, and if you're having any of the symptoms--strange search windows and odd pop-ups--that you follow the instructions for removing the software.

I only mention it again because of four computers I looked at today, three had ezula.exe sitting right in their C:\ drive...

Posted by Anthony on April 19, 2004 3:07 AM | Permalink

Comments

Quick update (June 04) - Webhancer and Ezula seem to have joined forces. I'm infe stuck with both and none of the removel instructions I found on the web seem to work. I've tried the latest versions of Adaware, Spybot and PestPatrol but both Webhancer and Ezula come right back after a reboot. Been trying for 14 hours!

Posted by: Colin | June 27, 2004 10:05 PM

Run all of those programs again, and before a reboot, look for any odd *.exe files in your C:\ directory or C:\windows directory. (Normally, Ezula uses a file called ezstub.exe, stub.exe, or something similar.) If that's deleted, it shouldn't be able to reinstall on a reboot.

Posted by: A. Rickey | June 27, 2004 10:23 PM

Ok, By now i'm a spyware pro :P Programs like adaware and spybot are extremely weak, if you can get your hands on Webroot's Spysweeper it will save you LOADS of trouble. First of all, before running all of your anti spyware progs, run regedit and delete what registry keys you can find in hkey local machine and hkey current user (if you are on admin account). Then, manually delete any ACTUAL folders in program files that were made by the spyware. After that, check your startup programs to make sure no spyware is set to boot up. FINALLY, run your progs to finish them off.

Posted by: Gemquist | September 23, 2004 8:39 AM

You might try Hijackthis. It saves some of the trouble of running regedit. Do not use it lightly though, since it will let you destroy your computer.

Posted by: falkin42 | November 11, 2004 9:25 PM

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Name:

Email Address:

URL:

Remember personal info?

Comments:

NOTICE TO SPAMMERS, COMMENT ROBOTS, TRACKBACK SPAMMERS AND OTHER NON-HUMAN VISITORS: No comment or trackback left via a robot is ever welcome at Three Years of Hell. Your interference imposes significant costs upon me and my legitimate users. The owner, user or affiliate who advertises using non-human visitors and leaves a comment or trackback on this site therefore agrees to the following: (a) they will pay fifty cents (US$0.50) to Anthony Rickey (hereinafter, the "Host") for every spam trackback or comment processed through any blogs hosted on threeyearsofhell.com, morgrave.com or housevirgo.com, irrespective of whether that comment or trackback is actually posted on the publicly-accessible site, such fees to cover Host's costs of hosting and bandwidth, time in tending to your comment or trackback and costs of enforcement; (b) if such comment or trackback is published on the publicly-accessible site, an additional fee of one dollar (US$1.00) per day per URL included in the comment or trackback for every day the comment or trackback remains publicly available, such fee to represent the value of publicity and search-engine placement advantages.

Giving The Devil His Due

And like that... he is gone (8)
Bateleur wrote: I tip my hat to you - not only for ... [more]

Law Firm Technology (5)
Len Cleavelin wrote: I find it extremely difficult to be... [more]

Post Exam Rant (9)
Tony the Pony wrote: Humbug. Allowing computers already... [more]

Symbols, Shame, and A Number of Reasons that Billy Idol is Wrong (11)
Adam wrote: Well, here's a spin on the theory o... [more]

I've Always Wanted to Say This: What Do You Want? (14)
gcr wrote: a nice cozy victorian in west phill... [more]