Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

> How to use the self-help guides

This forum contains self-help guides on removing common malware and viruses. These guides can be advanced so please use them at your own risk.

If after following the self-help guide, or you can not find an appropriate guide, then you can receive step-by-step instructions directly from one of our experts by following the instructions in this topic: Preparation Guide For Use Before Posting A Hijackthis Log

 
Reply to this topicStart new topic
> How To Remove Spyaxe And Svchosts.dll/wbeconm.dll, Updated 12/28/05
Grinler
post Dec 6 2005, 12:13 AM
Post #1


Bleep Bleep!
******

Group: Admin
Posts: 31,597
Joined: 24-January 04
From: USA
Member No.: 3

How to remove Spyaxe
Credits: noahdfear



Note: The removal program is updated whenever a new file is found that is associated with this infection. When new updates are released, I will mention the update date in the topic description. You should remove the current SmitRem folder that you created, and redownload the SmitRem as per the instructions given in this topic.

What this program does:

Spyaxe is a anti-spyware program that is known to issue fake warnings on your computer in order to manipulate you into buying its full commercial version. If you are infected with this program you may receive warnings in your task bar that appear to be from Microsoft Security Center stating that you are infected with spyware and to run its special anti-spyware tool. This tool turns out to be the commercial version of Spyaxe. These warnings are fake and are a goad to have you buy the commercial version of this software.

Spyaxe Program


Tools Needed for this fix: Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [SpyAxe] C:\Program Files\SpyAxe\spyaxe.exe /h




Removal Instructions:
  1. Print out these instructions as we will need to close every window that is open later in the fix.

  2. Go to this page and click on the smitRem Download Link link to download smitRem.exe. When downloading smitRem.exe save it to your desktop. You will now see an icon on your desktop that looks like the one below.




  3. Double-click on the smitRem.exe file. You will now see a screen similar to the one below.






    Click on the Start button and the program will start extracting the files into a folder on your desktop called smitRem. When it is finished, click on the OK button. If you look on your desktop you will now see a folder called smitRem.

  4. Next, please reboot your computer into Safe Mode by doing the following:

    1. Restart your computer

    2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

    3. Instead of Windows loading as normal, a menu should appear

    4. Select the first option, to run Windows in Safe Mode.

  5. When your computer has started in safe mode and you see the desktop, close all open Windows.

  6. Open the smitRem folder on your desktop and the contents of the folder will be similar to the image below.





    Double-click on the RunThis.bat file, as shown by the arrow in the image above, to start the tool.

  7. When the tool starts you will see a series of screens with information on them. Read each screen, and when you are finished reading it, simply press any key on your keyboard. After reading the various screens that appear, the program will start the removal process.

    If there is an uninstaller present for the infection you are removing, smitRem will start this uninstaller which will looks similar to the image below.





    Simply click on the Uninstall button and allow the uninstaller to finish. When it is completed, it will close automatically and smitRem will prompt you to continue. Now you should press any key to continue.

    When no more uninstallers can be found, the tool will continue. Your desktop will disappear and you will start seeing text scroll across the screen. This is normal and nothing to be concerned about. When smitRem has finished running it will automatically start the Disk Cleanup program as shown by the image below.





    This program will remove all Temp, Temporary Internet Files, and empty your Recycle Bin in order to remove any leftover files installed by this infection. This process can take up to a few hours depending on your computer, so please be patient. When it is complete, it will close automatically and you will be back at your desktop.

  8. When the tool is finished, it will will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or the partition where your operating system is installed. Examining that log should show that the infection was cleaned.

  9. Reboot your computer back to normal mode.

Your computer should now be free of the SpyAxe infection.

If you are still having problems with spyware after completing these instructions, then please follow the steps outlined in the topic linked below:

Preparation Guide For Use Before Posting A Hijackthis Log

If you feel that this tool has saved you time and/or money and you would like to donate to noahdfear for the time and effort he has put into this free tool, you can do so by clicking on the PayPal Donate button below.




This is a self-help guide. Use at your own risk.



BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
Grinler
post Dec 28 2005, 01:19 PM
Post #2


Bleep Bleep!
******

Group: Admin
Posts: 31,597
Joined: 24-January 04
From: USA
Member No.: 3
This program has been updated today, 12/28/05, to include the removal of c:\windows\system32\wbeconm.dll and associated registry entries. If you had previously downloaded SmitRem and you are still infected, remove the existing SmitRem folder from your hardware and download it again. Then follow the instructions in the topic.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
Grinler
post Jan 12 2006, 11:34 PM
Post #3


Bleep Bleep!
******

Group: Admin
Posts: 31,597
Joined: 24-January 04
From: USA
Member No.: 3
This tool has been updated recently to be able to remove the c:\windows\system32\netwrap.dll file.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
Grinler
post Jan 24 2006, 01:44 PM
Post #4


Bleep Bleep!
******

Group: Admin
Posts: 31,597
Joined: 24-January 04
From: USA
Member No.: 3
Smitrem has been updated to remove the file %systemroot%\system32\replmap.dll


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
ydrah
post Feb 12 2006, 02:49 AM
Post #5


New Member
*

Group: Members
Posts: 2
Joined: 12-February 06
Member No.: 54,753
i just want to thank you guys for your generosity in helping those who have been victimized by spywarestrike like myself. fact is, i can't say thank you enough after agonizing for more than a month over those unwanted pop-ups on my screen. you guys are great! keep on the good side and count me in.
Go to the top of the page
 
+Quote Post
rallen
post Feb 12 2006, 09:16 AM
Post #6


New Member
*

Group: Members
Posts: 1
Joined: 12-February 06
Member No.: 54,777
I, too want to thank you for your knowledge in my efforts to get rid of spyfalcon and spyware strike. Your instructions, although slightly intimidatingto a novice like myself, worked like a charm!
Go to the top of the page
 
+Quote Post
« Next Oldest · Spyware and Malware Removal Guides and Reading Room · Next Newest »
 

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version Time is now: 20th November 2009 - 09:34 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.

Powered By IP.Board © 2009  IPS, Inc.