Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I recently had spyaxe installed in my laptop, and i got rid of it using Ewido Security Suite (trial version download), but i think i got it back - i'm not totally sure, cuz i can't find Spyaxe on the add/remove program panel.
I get the IE startpage change problems - blank page that switches to "Security Center" (www.updateyoursystem.com) with a pop up that starts with "Warning! ... "
shortcuts to "Security Troubleshooting" (onlinesecurity.net), "Online Security Center" (securityindex.net),
and added favorites to "Antivirus Test Online" (onlinesecuritytest.net), "Free XXX Sites List" and "Take It Here - Daily Updated Porn Links"Pop up window to www.pc2006.net/information/aff/index.aa.cx.html, and www.notfound404.com when i change sites. occasionally.
right now i have this System Alert icon that keeps on popping up messasges about Adware&Spyware.
So, is this related to Spyaxe? will i have to use HJT, cuz i don't know how to use it. i've used it once with directions. for antivirus/antispyware programs i'm currently using ewido security suite (the trial version) and norton antivirus (which i think is also a trial version)
help me please cuz this is driving me nuts :S
Muchas Gracias
Install this ( free )
Foxie
http://www.getfoxie.com/Once installed, open IE & up the the top you will have a new button ( Swift Sweeper ) Click on it & remove all problems by clicking on > Remove all.
Get the latest version of hijackthis.
http://tomcoyote.com/hjt/HijackThis log file analysis & repair
http://hijackthis.de/index.php?langselect=english
Or,
http://startup.networktechs.com/page-68.html
http://hjt.iamnotageek.com/
0 
If foxie dos'nt remove > svchosts.dll ,do it manually. Note it is dll, not exe.
C:\Windows\System32\svchosts.dll
0
If it does turn out to be spyaxe, here is more info. Also the spyaxe site does provide a removal tool, this is not to be trusted, from a rouge company.
SpyAxe
http://www.spywarewarrior.com/rogue_anti-spyware.htm
spyaxe.com
topantispy.com desktop hijacking, aggressive/deceptive advertising (1); uses inadequate scan/detection scheme
0
Hey, Johnw, thnx for the tip on foxie. it did remove my scvhosts.dll, but i just got another adaware&spyware alert icon..which leads me to securityindex.net. i suppose it is spyaxe after all? :S
think i'd have to use HJT? if so, mind giving me a hand please? :P
Muchas Gracias
0
this link heloed me.
i removed it successfuly
http://www.sysinternals.com/Forum/forum_posts.asp?TID=2412&PN=1
namr
0
I spent a few hours wrestling this wonderful POS. It is using the same functionality that Gator had to change it's core .dll name.
I went to %winnt%\system32 and sorted by date modified and date created. The one file that topped each list was dxole32.exe. I renamed it to dxole32.exe.bak and the .dll that had the same creation date. Rebooted and no more stinking pop-up.
The .dll I renamed was named ioctrl.dll. My guess is that unless you remove all of the files for SpyAxe on the first try it will recreate itself with a new name after each reboot.
I hope this helps.
0
its seem there are cases when spyaxe reappearing again..
Spyaxe spread a lot, maybe its in mutation stage.
Anyway from my personal research the first program which added spyaxe to their removal list (and it was a month ago) was spyware doctor. A bit later added spysweeper, counterspy. Adaware and Msantispyware added just few days ago. I saw post that spyware doctor remove spyaxe without comming back, spysweeper has some issues. But this can change if the parasite mutates for sure.
0  |
 Worm W32 Mytob MC
|
Virus? general protection...
|
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
