Description: Added by the Troj/LowZone-BB Trojan.
File Location: %WinDir%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
First of all, Use Taskmanager (Ctrl-Alt-Del) to end these running processes if you can (or use Process Explorer) and end the elitemediapop.exe
do the same with Zeno.
As I don't know which Operating System you have - you can try (only for Win2000 and XP) ewido malware suite
Please download, install, update and scan your system with the free version of Ewido Malware Suite.
1. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
2. When you run ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
3. From the main ewido screen, click on update in the left menu, then click the Start update button.
4. After the update finishes (the status bar at the bottom will display "Update successful"), exit Ewido and boot into safe mode:
Restart your computer, and begin tapping the F8 key on your keyboard. Continue to do so until the Windows Advanced Options menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Using the arrow keys on the keyboard, scroll to and select the Safe mode menu item, and then press Enter.
Now open Ewido, click on the Scanner button in the left menu, then click on the Start button. This scan can take quite a while to run.
If ewido finds anything, it will pop up a notification. You can select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
Pls. let us know how you are doing.
SOS, SOS, help please.
I'm being bombarded by "elitemedia" and "zeno".
Spyware Doctor was not able to fix the problem