My computer is alerting me with this message
"Your computer is infected"
If i click on it, it brings me to spyaxe homepage and it automatically downloads spyaxe.
Please help me get rid of the spyware that i currently have

Try this link or google

" You're only as safe as your last update "

Also look at response #7 here
www.computing.net 16942

" You're only as safe as your last update "

This may clean spyaxe. First download ccleaner to clean out all your temp files. Make sure there is not anything in the recycle bin that you need as ccleaner will delete recycle bin items unless checked not to do so. wait and run it after the Ewido scan finishes and while still in safe mode.

Download Ewido Security Suite then set it up this way Ewido Setup Instructions reboot into Safe Mode and run Ewido

When the scan has completed, Ewido will create a report.txt file. Click the "Save Report" button on the bottom of the screen and save the log to your desktop in case you need it later.

Please reboot into normal mode and post the ewido log.

here you can try manual spyaxe removal instructions.

Go the this URL. It contains info on how to manually remove Spy Axe. It worked for me!

http://www.2-spyware.com/remove-spyaxe.html

Patrick

gehts gehts
gehts gehtsgehts gehtsgehts gehtsgehts gehts

Ok it works, sorry but i do not like to waste my time with "sql error" and so on;
My message: I you follow http://www.2-spyware.com/remove-spyaxe.html and download the removal software you can scan your pc for free - for removal you have to pay, except you print the logfile and delet the files and registry entries yourself; for this purpos it's necessary to start windows (F8) in I guess it's called "secure mode".

yes, I confirm that I'm coming from www.hirners.com because I never use cloacking

Yes, I got the evil Spy Axe over the weekend. What a mess.

I have deleted out the mscornet, mssearchnet and nvctlr executables, removed the c:\windows\system32\1024 folder and removed a registry entry calling the mscornet.exe.

I'm still going to their website when I go to the internet even though my task manager shows none of them running.

Any ideas?

Mr Phil

I got Spy Axe this evening, and it was difficult to remove. Nothing would shut it down (it appears to be mssearch.exe and nvctrl when I used Task Manager). Uninstalling it didn't help, since it reinstalled itself. Microsoft AntiSpyware (Beta) didn't see it and AOL Spyware Protection (poorly named) found 3 trojans, which may have been related. Spy Axe even managed to launch itself when I booted in Safe Mode. I seem to have eliminated it by booting into Safe Mode, deleting all of the files (about 12-15) that were created when the virus struck (I found them by searching by timestamp), removing it from Startup using MSConfig, and using System Restore to go back to an earlier point. So far, so good (3 1/2 hours later).

I followed http://www.2-spyware.com/remove-spyaxe.html as mentioned above and got very angry, because I checked the URL for "Automatic SpyAxe removal:download removal software" and found a programm called Spyware Doctor. They promised a "free scan" so I tried the software. As mentioned you can "scan" your PC for free using this tool, but you can not remove SpyAxe, except you print the log, restart windows in safe mode and delete files and registry entries (at least 20 till 100).
That's way I really suggest you Ubuntu or Kubuntu and you never will have troubles with viruses, spyware and other maleware. Just have a look at http://www.ubuntu.com/

If you are recommending Ubuntu or Kubuntu and that they will prevent attacks from viruses and malware, they WHY DID YOU GET THE SPY AXE trojan on your machine ???

Spy axe removal explanation and directions:
remove spyaxe

I seem to have a NEW flavor of SpyAxe that does not have any of the files (like svchosts.dll) or any of the typical services and names. Therefore, the utilities for removal are NOT working for me, sad to say.

Anybody have any info on this new strain (I gotta be one of the first to get it because many of the fixes are only a few weeks old, lucky me!)

I am having the same problem Jim. I got this virus two days ago. None of solutions mentioned in the above thread is working. There is no svchost.dll or other registries that are mentioned in the discussions above. Manually I tried to delete the registries but can't find any with the names mentioned. Please Help!!!!

I have Spy Sweeper and have been unable to remove Spy Axe. I was told on Dec 13th by the brother of someone who is a developer for Spy Sweeper that this is a really malicious adware that keeps mutating and hiding itself so that you can't find it in the registry. He said Spy Sweeper may have a fix later this week, but I may need to reformat my hard drive.

I tried doing every fix mentioned and nothing worked. AOL told me that if I remove the above mentioned dll files, that the AOL software would not work. His answer was to send my computer back to the manufacturer and have the hard drive cleaned. I will never risk losing my files again and told him I will unsubscribe from AOL first.

Here is the email response I received from Xoft - I agree with the below opinion that the virus of from AOL Instant Messenger because that's how I got it:
~~~~

Unfortunately, we have found that AOL is causing Viewpoint to be installed on their client's machines. As long as you are using AOL, I think you are going to have to work around it until we can come up with a removal tool.

Here is an excerpt from an email I received from the research department with some suggestion.
======================================
There is, of course, a couple exceptions. AOL is forcing this onto its users' machines. So while the predefed response will technically work for AOL users it will get reinstalled as soon as they connect to AOL. I kind of doubt there is a way we can stop this. (an idea just hit me that possibly some false files *might* work but that'd take some testing.) I've also heard that it might be installed (and reinstalled) by AOL Instant Messenger. I'm going to check into that.

So... for now we can't really help AOL users on this. If they're going to use AOL they pretty much need to accept they'll get ad & spyware, right click on the entries in XoftSpy and hit ignore.

Well many many hours later and many many threads I found this worked for me after many other procedures didn't.

Go to this guys web site http://noahdfear.geekstogo.com/
and follow the instructions to detail. I had to change my background to the old one I had from blue, but apart from that. I am happy this guy does what he does for us goofs who don't know how to. ;)

As well I am now using EWIDO www.ewido.net
Very good as well.

Here's another post in computing.net threads I found helpful in the process. Response # 26
http://www.computing.net/security/wwwboard/forum/16942.html

Ive put a description of an easy fix on my website. For all of you who have tried everything and nothing seems to work.

http://www.counter-hack.net

The method from the link in reply #13 in this thread seemed to work for me (so far anyway)

..I was getting so frustrated because of all the porn popups coming on the screen....Don't these people realize that some of us have children the use the computer? I hope whoever is responsible for this virus gets a boot to the b@lls

I had SpyAxe, Trojan.Zlob & Security Toolbar (all part of the same virus) & got it all out of my system painlessly:

After I tried the KillBox method which may work but did not work for me, I Purchased on-line & installed Norton Antivirus 2006 product.

Then called their tech support & they e-mailed me for $30. a 6 page very simple & easy to follow instruction guide to removing it.

That did not fix for me - upgraded another $30. & had them walk me through a more comprehensive process - 20 - 30 minutes.

It is no quick easy fix getting this garbage out of your system - there were an unbelievable amount of files we had to remove from places you would never believe exist. This virus is resident in more than what is mentioned here in this forum & in tons of code that yould never know about.

Either way it was worth the $60. to have them get it all out quickly.

Good Luck To All & Merry Christmas !!!

Nick M.

By far the best "How to" remove SpyAxe can be found here:

http://www.infopackets.com/channels/en/windows/nicks_computer_security/2005/20051220_remove_spyaxe_removal_instructions.htm

The instructions are clear and very concise.

I've already had ~20 people email me today and confirm the removal instructions work.

Good luck!

Thanks wubbaducki,

This worked great for me, but with one problem. The malware appears to be gone, but IE (with WIN XP)won't connect to the internet. It comes back with the standard "blank" page that you normally get when your internet service is down. I am connected to a wireless router that connects to my cable modem. When I go to Network connections, it shows both being connected (it should only show the router as being connected) and it says they are "firewalled". Any ideas what got messed up?

Thanks in advance.

njjimf

Have just spent a frustrating few hours trying to get rid of this...used smitrem.exe which has stopped the annoying popups but now whenever i click on the explorer icon I go straight to a site called www.securitycaution.com.....does anyone have any suggestions as to how I remove this site? Have I done something wrong??!!

jamesmayoc

I have a better idea. I'm going to make SpyAxe remove itself. I'm going to file a lawsuit to compel the company to remove it. Anyone have any thoughts on that?

I think a lawsuit is a good idea but how effective will it be? There is really no contact info and you'd have to get the FBI involved...

download webroot spysweeper. free to try for 14 days. removed it from my pc. works great!