Spyaxe- Completed manual delete but still issues

[mcfranczyk]

I completed the manual delete process for spyaxe.

The pop-ups are gone.  However, myhomepage is still loading to their website.  

I have noticed the following.

If I type the site name I have listed as my homepage into the address bar, it will not load.  However, when I change the my homepage site to something else, that new entry becomes inaccessible and the previously blocked site can be accessed.  I'm including this detail because it seems to give some insight into how the spyware is manipulating IE.

Anyone know where / how I can fix this?  I think it must be a registry entry... but i've deleted everything that makes sense.

[Huggyboy]

I had the same problem and I noticed that there was an add-on enable (using IE) called HomepageBHO - disable it, close and open IE and the homepage works as it should.
I am a complete novice at this spyware business and forced into it by 'catching' some on the weekend

[GTO]

Hi, mcfranczyk. Welcome to 2-Spyware.com forums!

Huggyboy might be right. Described symptomps indicate that your web browser might be using a malicious plug-in installed by SpyAxe or another parasite. But I cannot provide you with exact removal instructions yet, as I need more details on your system. So, please download the HijackThis program, scan your computer with it and post a fresh log here.

[phil7979]

Hi, Just cleaned my computer of Spyaxe by booting in Safe Mode, then accessing C:\Windows\System32 and ordering the contents by date. Selected all items created on the date of my PC's infection and deleted them - no exceptions! Then rebooted in normal mode. This required me to reactivate my Windows sw with MS but after that rebooted and Spyaxe no longer present. Hope this helps. Phil7979

[GTO]

phil7979's advice might help you to clean up your system. However, it's not recommended for inexperienced users. Performing such kind of actions may corrupt your entire system and installed software. In order to quickly and safely get rid of SpyAxe you should follow these manual removal instructions.

[phil7979]

I agree with GTO, that the solution I posted assumes a certain level of knowledge by the end user. However, before I chose the solution I posted, always being ultra-cautious when tinkering with the Registry, I had searched the Internet and tried a variety of solutions as well as GTO's manual solution, without success as some of the files listed either did not exist or resisted deletion. Indeed, trying to stop the mssearchnet.exe and nvctrl.exe processes simply resulted in them reappearing again immediately after stopping them!

I even tried contacting Spyaxe through their website without receiving any response. Having looked at the other threads on this topic I've drawn the conclusion that the software vendors of Spyaxe are solely responsible for this infection and are deliberately modifying their virus to overcome the solutions which are being posted on the Internet. Looking at their alerts it seems to me that they warrant reporting to Microsoft as the Spyaxe alerts and warning messages are masquarading as Windows alerts and messages, which is a clear infringement of Microsoft's Intellectual Property rights.

[berkleecomp]

I just recently had the same problem with spyaxe and my homepage and I followed huggyboy's advice about disabling the add-on "HomepageBHO".  This worked for me, also, so I recommend anyone without any experience in such matters  (such as myself) try this before messing with anything important like registry stuff.  Just thought I'd weigh in.

[bobby]

someone help, I cn't get rid of the pop up for spyaxe.  I am lost for the  instruction of manuel deletion.  I only see a 'automatic run program' which you have to pay...is there anything free out there?

[bcdr05]

Disabling the 'Homepage' that you speak of works in the short term

[GTO]

Simply follow SpyAxe manual removal instructions. If you run through them carefully, you won't need to download any software at all. However, having a reliabe anti-spyware program is always recommended.