Home > Please Help > Please Help! Spyaxe

Please Help! Spyaxe

Please post that log along with all others requested in your next reply.Open Ad-aware and do a full scan. Adam Smith Glasgow, 1760 Back to top #3 nasdaq nasdaq Forum Deity Global Moderator 49,120 posts Posted 28 December 2005 - 09:35 AM Due to the lack of feedback this Topic We will fix this in a moment.From the main Ewido screen, click on update in the left menu, then click the Start update button.After the update finishes, the status bar at Using the site is easy and fun.

i still have Spyware Strike, and i was hoping that someone could give me some steps in order to remove the file. The only remaining "symptoms" that I have are:a) "System Intrusion Detected" warning popping up from the Windows Update Globe in the System Tray. I have no svchosts.dll running in my memory or a file with that name located in C:\windows\system32, i only have svchost. ( I tryed to find svchosts.dll in c:\windows\system32 and in When i launch IE (internet Explorer) it instantly directs me to a website with the address http://www.updateyoursystem.com/ and then tells me i should download spyaxe or spytrooper or the spyguard. https://www.bleepingcomputer.com/forums/t/40101/please-help-spyaxespywarestrike/

Register now! Here is my HijackThis log file:Logfile of HijackThis v1.99.1Scan saved at 17:55:29, on 05/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\mcafee.com\agent\mcdetect.exec:\PROGRA~1\mcafee.com\agent\mctskshd.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exec:\PROGRA~1\mcafee.com\vso\mcshield.exeC:\PROGRA~1\COMMON~1\Stardock\SDMCP.exeC:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\PROGRA~1\mcafee.com\vso\mcvsshld.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exec:\progra~1\mcafee.com\vso\mcvsescn.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Spybot - Search This applies only to the original topic starter.Everyone else please begin a New Topic. Don't run it yet!Boot to safe mode.Open the SpyAxeFix folder and double click the SpyAxeFix.bat to start the tool.

Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy Jump to Back to top #9 jedi jedi aequam memento rebus in arduis servare mentem Retired Staff 15,830 posts Posted 15 December 2005 - 10:20 AM Since the issue appears to be resolved O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program checking for PSGuard.com keyPSGuard.com key not present!

I would be very grateful for any assistance that any kind soul here wishes to provide. jedi jedi My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. http://www.bullguard.com/forum/10/SpyAxe-Please,-PLEASE-Help_26237.html Edited by mageweave, 05 December 2005 - 01:36 PM.

Did you run the SmitRem tool? And please give a description of any other problems you may have. Generated Tue, 17 Jan 2017 01:56:16 GMT by s_ac2 (squid/3.5.20) Jump to content Sign In Create Account Search Advanced Search section: This topic Forums Members Help Files View Thanks Barney Back to top #6 jedi jedi aequam memento rebus in arduis servare mentem Retired Staff 15,830 posts Posted 10 December 2005 - 05:11 AM The method posted by mageweave

Locate it and select it.5) Click open and HiJackThis will alert you that you need to reboot for the changes to take effect. you could try here Make sure the Autoclean box is checked!Finally, restart your computer once more, and please post a new HijackThis log as well as the log from the Ewido scan and the log It's considered to be foistware even though it may not spy anymore. . Started by kyri84, Jan 02 2006 07:12 PM This topic is locked 2 replies to this topic #1 kyri84 kyri84 Member New Member 1 posts Posted 02 January 2006 - 07:12

Remove everything found.Now open Ewido Security SuiteClick on ScannerMake sure the following boxes are checked before scanning:BinderCrypterArchivesClick on Start ScanLet the program scan the machineWhile the scan is in progress you Click here to Register a free account now! It is found in C:\Windows\System32 folder. With service pack 2 and have McAffe Virus Scanner and Firewall installed.

Im running windows XP home edition. Spyaxe first popped up on 12.28; the smitRem.exe found here took care of it. Any help would be most appreciated. Good luck!

Sheepshead - http://download.games.yahoo.com/games/clients/y/dt0_x.cabO16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall Back to top #3 glewjgmlermnglermg glewjgmlermnglermg Member Full Member 4 posts Posted 05 December 2005 - 01:44 PM Barney, I just had the exact same problem with SpyAxe (NASTY malware btw) Back to top #7 glewjgmlermnglermg glewjgmlermnglermg Member Full Member 4 posts Posted 10 December 2005 - 07:15 AM The method posted by mageweave will not remove Spyaxe.

Several functions may not work.

Found your solution, but I don't have your expertise. No more nastly little pop-up bubble every 10 seconds. 6) Run an adware scan and remove any remnants of SpyAxe, if any.Good Luck, and report back on how things go! With steps so it does not happen again !Glad I was able to help. However, you can use a tool in HiJackThis to remove it.1) Double-click the HiJackThis .exe file.2) One of the options at the dialogue box is "Open the Misc Tools Section" --

However, you can use a tool in HiJackThis to remove it.1) Double-click the HiJackThis .exe file.2) One of the options at the dialogue box is "Open the Misc Tools Section" -- Select if found Wildtangent entry and click ‘Remove’. Any help would be appreciated. I have Spyaxe!

checking for WinHound.com keyWinHound.com key not present!spyaxe uninstaller NOT presentWinhound uninstaller NOT presentSpywareStrike uninstaller NOT present~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Existing Pre-run Files ~~~ Program Files ~~~ ~~~ Shortcuts ~~~Crystalys Media folder ~~~ Favorites ~~~Antivirus Click Apply and Exit Spyware DoctorOnce your log is clean you can re-enable Spyware Doctor.Close all open Explorer windows and browsersRun HijackThisClick on the Scan button and when completePut a check Popped up again under the "SpywareStrike" label. mssearchnet.exe does NOT exist on my PC anymore.2.

Follow the prompts on screen.Wait for the tool to complete and disk cleanup to finish.The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk Here is my Hijackthis log: Logfile of HijackThis v1.99.1 Scan saved at 5:39:07 PM, on 2/01/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe In order for you to receive the best help we need to see a log from your machine to help you.Please follow th instructions here:http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/phm, would you be so kind as