Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spyaxe Removal


  • This topic is locked This topic is locked
2 replies to this topic

#1 pschaafs

pschaafs

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:04 PM

Posted 27 December 2005 - 02:23 PM

Aagh! I found a new icon in my taskbar this morning, which continually pops up a message saying my computer is infected and telling me to "click here to protect your computer..." That click takes me to the SpyAxe website which asks me to download the program. I didn't do that.
From other forums I have learned about spyaxe and found some things to do to remove it, none of which have worked.
BTW, I have Ad-Aware SE, Spybot and McAfee security suite.
I tried the Smitrem tool, but it didn't work. I downloaded and tried EWIDO, it found some stuff but didn't get rid of Spyaxe.
Can anyone advise me how to proceed?

Here is the log file from Smitrem:

smitRem log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: Tue 12/27/2005
The current time is: 9:27:07.32

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!

spyaxe uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Online Security Guide.url
Security Troubleshooting.url


~~~ Favorites ~~~

Antivirus Test Online.url


~~~ system32 folder ~~~

1024 dir
msvol.tlb
ld****.tmp
mssearchnet.exe
ncompat.tlb
nvctrl.exe
mscornet.exe
hp***.tmp


~~~ Icons in System32 ~~~

ts.ico
ot.ico


~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright© 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 840 'explorer.exe'
Killing PID 840 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Online Security Guide.url


~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :thumbsup:

BC AdBot (Login to Remove)

 


#2 pacman123

pacman123

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 27 December 2005 - 04:09 PM

Hi after all you have done i think the next way to go would be with HJT...Please read here before posting.........

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

#3 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:06:04 PM

Posted 27 December 2005 - 08:42 PM

Thanks packman123

I've cut the log away from this thread since pschaafs did post in HJT Forums.

:thumbsup:
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users