Forum Home
Press F1
 
Thread ID: 64359 2005-12-12 18:29:00 Infected by Spyaxe !! How do I remove... mikejb (1653) Press F1
Post ID Timestamp Content User
412136 2005-12-12 18:29:00 I run XP-pro....and have an infection of Spyaxe with Very annoying popups and take over of my browser etc. I've tried all the removal tools, Spybot, Adaware , Ewido, Norton etc. Some people say it removes it, while others say it doesn't.
None work.
Is there a conclusive method of removing it ? (apart from Format C: ) !!!
Various forum discussions seem to conflict with each other's comments, and NONE work ! This infection is driving me nuts, here Any advice is appreciated.
Please - HELP !
mikejb (1653)
412137 2005-12-12 18:33:00 See if this (dl.filekicker.com) removes it. Download it, update it. Then click on scan.

Then select the 3rd-7th option under the utilities menu.

And make sure XP is up to date.
Speedy Gonzales (78)
412138 2005-12-12 18:39:00 I run XP-pro....and have an infection of Spyaxe with Very annoying popups and take over of my browser etc. I've tried all the removal tools, Spybot, Adaware , Ewido, Norton etc. Some people say it removes it, while others say it doesn't.
None work.
Is there a conclusive method of removing it ? (apart from Format C: ) !!!
Various forum discussions seem to conflict with each other's comments, and NONE work ! This infection is driving me nuts, here Any advice is appreciated.
Please - HELP !
To save you a lot of time go to the two links provided below. The first link contains the instructions and some links, one link to the tool required. The second link is to the tool page. Read all info on both links and follow instructions given by the links and myself and you should have no problem.

The Two Links to Use:

Go Here for Instructions = malwareremoval.com

Go Here to Download SmitRem = http://noahdfear.geekstogo.com

Steps required to get rid of spy Axe:
1) Do Not Run at this time.....Download SmitRem to a desktop folder.....open the smitRem file to extract to Smith REm File.....DO NOT RUN at this time.

2) Download trial version of Ewido....check for updates.....Do NOT RUN at this time.

3)If do not already have AdAware SE on your computer, then download it also and update....Unfortunate you will have to take time out to run AdAware if you update it for the update to take effect. Otherwise, if already have AdAware, DO NOT RUN it at this time.

4)Reboot to Safe Mode, pressing F8, to run Windows in Safe Mode.

5) On your desktop in the Safe Mode mode, open the SmitRem folder, find the "Run this .bat MS-Dos Batch file". Double click this file..... Several command prompts will appear one after the other. Just read and follow any instructions that might be given and simply press any key as instructed for each prompt......Spy Axe Uninstaller is ran, have to press any key to begin......There will be more than one instance where will have to Read instructions and press any key when instructed.......The taskbar will disappear and look for instruction displayed to press any key to begin a disk clean up.......Disk Clean up can take from five minutes to several hours depending oncomputer setup. It is importantto let this clean up to proceede without interferance and to let it scan and clean any external drives also.

6) When Clean up is done.....While still in safe mode.......Open Ewido and let it do a full system scan and let it fix anything it finds.

7) Scan with AdAware

8) Can at this time if desired....Do a scan with SpyBot Search and Destroy or can eboot.....I suggest doing the SpyBot scan.

9) ReBoot normally.

Note: Even after all this there may still be something found that will require additional steps, such as removing final traces of "SmitFraud-C" that may be found by SpyBot and not the other scanners.

Then run SpySweeper = http://www.webroot.com/
Sultan_Emerr (7444)
412139 2005-12-12 18:56:00 See if this ( . filekicker . com/send/file/168259-1P80/trsetup . exe" target="_blank">dl . filekicker . com) removes it . Download it, update it . Then click on scan . Small tip Speedy, if you are going to link directly to an exe which is hosted on a file server then also provide the homepage of that program so that people can see what they are about to download . That program is shareware and requires registration/payment after 30 days . People might like to know that before installing that program . They might also like to know what that program is .

Simply Super Software Trojan Remover homepage ( . simplysup . com/tremover/details . html" target="_blank">www . simplysup . com) - trsetup . exe
Jen (38)
412140 2005-12-13 02:01:00 Download SpyAxeFix.exe from here noahdfear.geekstogo.com and save it to your desktop.

Close all open programs and windows and doubleclick SpyAxeFix.exe and click Start to extract the utility to it's own folder. Open the SpyAxeFix folder and doubleclick on SpyAxeFix.bat to start the tool.

When the tool runs, your taskbar will disappear and your computer will restart when the tool has finished. A text file named spyaxe.txt will be created in the SpyAxeFix folder. Post the contents of that log please.
Pancake (6359)
412141 2005-12-13 20:31:00 Thanks everyone.
After a real battle, I have ( I HOPE) removed it by a combination of using SmitRem, then in Safe mode I used HijackThis (nothing was found there) and back to SmitRem again, before using Ewido. That did the trick finding 4 references to Spyaxe, and a pile of other possible nasties. So far so good.
Thanks for any advice given... it sure helped.
mikejb (1653)
412142 2005-12-14 09:54:00 Speaking of linking to the page the download is on and not directly to the download, the independent SpyAxefix is no longer avalable. It has been incorperated into noahdfear's SmitRem fix. You can get that from here (http://noahdfear.geekstogo.com/) . Nick-YF19 (9416)
1