almost free of spyaxe ???

  paul 20:12 10 Dec 2005
Locked

I have been battling to free my computer of spyaxe over the wweekend.....and seem to have largely regained control of most aspects.......( IE, constant warnings etc........

however sometimes in IE - i get an error 404 page and a bar appears telling me I need to download spytrooper etc to get rid...........

in REGEDIT I have some supsect files when I search on smitfraud......i get the following results

Deafa ult Reg 5-z (values not set)
000 Reg 5-z *.hta
001 Reg 5-z spyaxe
002 reg 5-z smitfraud
003 reg 5-z hijack

can I delete these ? - will it help

  Fruit Bat /\0/\ 20:47 10 Dec 2005

The lastest version of Noahdfear's Smitfraud Removal Tool now works to also fix SpyAxe problems.

Please download smitRem.exe click here and save it to your desktop but do not run it until indicated.

* It is necessary that you Close all other programs and windows including this one. So you should print or save these instruction locally in a text file for easy reference while offline.
* Double click on smitRem.exe and then click on Start. When it is done, click on the OK button. You should now have a folder called smitRem on your desktop.
* Next, please reboot your computer in Safe mode
* Once you have booted in Safe Mode and your Desktop appears, make sure you close any other windows and only run what is specified.
* Open the smitRem folder on your desktop and double click the RunThis.bat file to start the tool.
* Follow the prompts on screen and wait for the tool to complete and disk cleanup to finish.
* When the tool is finished, it will will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or the partition where your operating system is installed. Examining that log should show that the infection was cleaned.
* Now reboot your computer into Normal Mode.
* Please post the contents of the smitfiles.txt file here in your next message along with your current status.

  paul 21:52 10 Dec 2005

Thanks for the support - that seemed to work nicely and the file says it is clean.

attached below as you requested......

Thanks

smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: 10/12/2005
The current time is: 21:32:33.14

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!

spyaxe uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~

msvol.tlb
ld****.tmp
ncompat.tlb
hp***.tmp


~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 [email protected]
Killing PID 900 'explorer.exe'
Killing PID 900 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)

  Fruit Bat /\0/\ 22:31 10 Dec 2005

Yeah looks like its clean now!

  ITmoron 21:03 11 Dec 2005

I am struggling to get rid of the curse of SpyAxe.

I have run MS Antispyware which captured and removed it. I have run smitRem (see below), I have used find and deleted files found, I have used Control Panel - Add / Remove programmes.

All I (think) I have left is a Virus Alert ICON in the Sys tray which has a baloon message "Your computer is infected! etc.

Any assistance will be much appreciated.

smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: 11/12/2005
The current time is: 20:14:54.01

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!

spyaxe uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 [email protected]
Killing PID 736 'explorer.exe'
Killing PID 736 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)

  VoG II 21:13 11 Dec 2005

Run HJT click here and post a log on this specialised forum click here

Be sure to explain your symptoms and what you have already done.

  Showerman 17:06 12 Dec 2005

got the same ploblem

  chrisakaad 11:14 13 Dec 2005

I've read most of the items in relation to this pain in a*#e hijacker. If you've not already guessed - yes my system has got it as well.
Fruit Bat - I've used the smitRem.exe but the bloody thing is still there - do you have any other things I could try.
Attached is the smitfiles.txt log

smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: 13/12/2005
The current time is: 10:44:48.67

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!

spyaxe uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 [email protected]
Killing PID 856 'explorer.exe'
Killing PID 856 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)

  chrisakaad 18:31 13 Dec 2005

A very big thankyou to all those who ahve given me advice and pointed me in the direction of 'Malware Removal' - what another excellent forum site.
With the help of recommended programmes
Ewido security,
Highjack This,
SpyaxeFix
and then an online system check by Panda Active Scan - my system seems to be clear once and for all of the annoying spyaxe.
Once again thanks to those who helped - people like 'Fruitbat' - their advice is well worth listening to. thanks once again.

  scoozie 17:18 16 Dec 2005

Thank you to all....
File says it is clean....
Below is the requested

smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: Fri 12/16/2005
The current time is: 11:54:09.87

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!

spyaxe uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Online Security Guide.url
Security Troubleshooting.url


~~~ Favorites ~~~



~~~ system32 folder ~~~

1024 dir
ld****.tmp
hp***.tmp
logfiles


~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 [email protected]
Killing PID 812 'explorer.exe'
Killing PID 812 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Online Security Guide.url


~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)

  Fruit Bat /\0/\ 17:52 16 Dec 2005

The latest Update of AdAware click here will now clear Spyaxe

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Fujitsu Lifebook P727 laptop review

11 best portfolio websites for designers and artists

Office for Mac buying guide: Price, Office 2017 rumours & new features

Comment désactiver les programmes qui s'exécutent au démarrage de Windows 10 ?