Spyaxe Leftovers

Question

Hi I got the spyaxe anoyance today and I was able to find a way to get rid of it rather painlessly (thanks mcafee) but there is still the systray popup. the onr that say 'your computer is infected with malware bla,bla,bla,' and i have been though all the removal guides I could find but the mcafee guide deleted all the regestry keys that they had down, so i think that this maybe a mutation of the spyaxe or just another version to keep on top of the good people that spend there time undoing the spyaxe bug. If anyone knows how to find the file that is causing the popup to come up (it even comes up in safe mode) please I am all ears.   Cheers Dave   P.S. If anyone wants the site for the uninstall instructions from mcafee - http://tools.mcafeehelp.com/doc.php?siteid=1&docid=395886&support=ts and I am running XP home sp2 & all the latest up dates.   Message Edited by GravyDave on 12-12-2005 04:41 AM

Arkansas1 · Answer

To Gravy Dave

I used the McAfee manuel tool and eliminated everything but Spyaxe's taking over my home page. Well, it says this site has been blocked. "Buy SpyTrooper to fix it."

My home page is Yahoo. I can get it my putting it in the browser manually.

Any ideas on how to get this fixed?

GravyDave · Answer

hi, if you are using Internet explorer then go to tools, manage add-ons in the add-ons window there should be a BHO (Broswer Helper Object) Just click on that and disable it.   that should work.   Dave

Arkansas1 · Answer

To GravyDave Thank you. Thank you. Thank you. Found it under Explorer: Tools: Programs: Add ons

GravyDave · Answer

thats cool glad i could be of service   can any one help me with my problem   Message Edited by GravyDave on 12-12-2005 05:19 PM

momtimes2 · Answer

Thank you your advice changed what I spent 8 hours fixing with spyware removal programs! Ihope it is that simple! (I disabled the BHO) thank you thank you:smileyvery-happy:

phorr20 · Answer

'Now go find the file from response #43 and delete it also'   Sorry about this part, I was at another site trying to help, and this guy had the file that highjacks your homepage.. This refers to another 'spyaxe' file in 'system32' that highjacks your homepage ...I'm not sure specifically what one it is but like I said, if you delete all files from system32 that were created on or since the problems have been occuring it should fix it.   Paul

phorr20 · Answer

I tried to put it all in very simplistic terms for people that aren't that computer savvy to understand. It was quite a challenge for me to say the least. If I forgot something please let me know :)
Start your computer and push "F8" vigorously till you come to a black screen. At the top of the black screen you'll see "Safe mode", using your arrows scroll up, highlight it and hit "enter". This will take you to a screen that will allow you to access your desktop. Wait till your desktop appears. Go to start menu...then click "search"...then click "files and folders in C Drive"...then search for "ioctrl.dll"...right click on "ioctrl.dll" and at the bottom you'll see "rename"...rename it to "ioctrl.old"...then restart your computer in normal mode and it shouldn't show up in the icon tray. Using the same process to search for a file as I stated above from the start menu, find the file "ioctrl.old"...right click it and hit delete...it should take a short trip to your recycle bin...now delete it from there also...nice huh...it works :) Now go find the file from response #43 and delete it also. It would also probably be a good idea to delete anything in "System32" that has shown up there since the whole problem started...all this really isn't that diffucult...GOOD LUCK!!

PS >> Instead of the file "ioctrl.dll", you might find "svchosts.dll", just rename the "dll" part to "old" it should work for either one.

Paul

neowin8673 · Answer

Go here to download smitrem (http://noahdfear.geekstogo.com/). Download the file but do not run the file.

Restart your computer and when you see the Dell logo, tap on the F8 key to go into safe mode.

Log in to your account.
Double click on the file smitrem, then click on run.
Click on start to extract the files.
Close out of all windows and then double click on the folder smitrem.
Then double click on the file runthis.
Follow prompts.
This program will scan your system and make sure it is clean of spyaxe.
Once finished, restart your computer and you should no longer be infected with spyaxe.

Your desktop may have changed. To fix this, right click on desktop, properties, themes and choose windows xp, click ok and system should be back to normal.

After you are clean of spyaxe, you may want to flush out your system restore points, so you don't roll back to before you were clean.

Click on start-->right click on my computer--properties--system restore--put check mark in turn off system restore--apply-- (click yes on prompt)--then click ok.

Now restart your computer.

To renable system restore, repeat above and uncheck the box that says turn off system restore.

To create a system restore point, click on start-->all programs--accessories--system tools--system restore--create a restore point--next--give it a descriptive name---create. System is clean.

maitreya667 · Answer

Hi, Here are some removal instructions you can find helpfull: http://www40.brinkster.com/spyaxe/spyaxe-remove.asp

Virus & Spyware

Spyaxe Leftovers

Was this post helpful?