Submit article
Subscribe
Severity scale:  
  (95/100)

SpyAxe. How to remove? (Uninstall guide)

removal by Lucia Danes - -   Also known as Spy Axe, Spyax, SpyAxe 3.0 | Type: Trojans
100 comments
Ask a question
47025 views
12❯

SpyAxe is a trojan, which displays one or two icons in the system tray. These icons show a message saying that the compromised system is infected with spyware parasites and asking the user to download and install an anti-spyware program (see the snapshot below), which actually is the infamous SpyAxe 3.0, corrupt illegally distributed spyware remover. Once the user clicks on such message, the trojan opens the anti-spyware’s official web site. It may also try to download the application automatically. SpyAxe 3.0 may also change the desktop background. The trojan automatically runs on every Windows startup.

People try to find information about SpyAxe 3.0 by various names and file relationships. They they try to use combinations: spy axe, spyax, zlob, needupdate, etc. All these names usually mean infections of the SpyAxe parasite. This threat tries to mutate and often uses different file names. Infections started with the use of svchosts.dll file, later with ioctrl.dll, and the last known infections are with the use of webconm.dll file.

Other similar parasites: SpyAxe, SpywareStrike, SpyFalcon, Spyware Quake

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove SpyAxe you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
(917) 341-2281
Reimage is recommended to uninstall SpyAxe. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Press mentions on Reimage
read press mentions »
Press mentions on Reimage
read press mentions »

SpyAxe manual removal:

Kill processes:
mscornet.exe,mssearchnet.exe,nvctrl.exe,spyaxe.exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler{A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler{E802FFFF-8E58-4D2C-A435-8BEEFB10AB77}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObject{A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72}

HKEY_CLASSES_ROOTCLSID{A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72}

HKEY_CURRENT_USERSoftwareClassesCLSID{A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3E9B951E-6F72-431B-82CF-4A9FBF2F53BC}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{7CAF96A2-C556-460A-988E-76FC7895D284}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E9CCF15D-4C68-4B5A-9E9A-8E12E4BD39BD}

Unregister DLLs:
ioctrl.dll,svchosts.dll,webconm.dll,wbeconm.dll

Delete files:
mscornet.exe,mssearchnet.exe,nvctrl.exe,spyaxe.exe,ioctrl.dll,svchosts.dll,webconm.dll,wbeconm.dll,hp[X].tmp

Delete directories:
C:Program FilesSpyAxe

C:WindowsSystem1024

C:WindowsSystem321024

C:WinntSystem321024

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions


This entry was posted on 2011-12-30 at 11:29 and is filed under Trojans, Viruses.

  • Guest

    Followed the manual instructions but still opened the SpyAxe web page when opening IE. Seemed to install an add-on called HomepageBHO which you need to disable if getting rid of it manually (Tools – Manage Add-ons – Disable)

    Thanks for the help – HuggyBoy

  • Guest

    I am not a computer Geek but a Gook and was able to manually remove Spyaxe from my computer by following your instructions. Great instructions and service you are providing.

    Thanks for the help. I will recommend to others.

  • Guest

    thanks for the fix it worked the first time

  • Guest

    Perfect, another computer saved. Thanks.

  • Guest

    spy axe also installs a security toolbar, which re-installs spy axe even if you removed it, and prevents internet explorer from going to any other location. This renders the computer useless for internet access. These people should be nuked.

  • Guest

    running right now. please work spyware doctor

  • Guest

    In my case the offending site was YOURSYSTEMUPDATE.COM and NEEDUPDATE.COM owned by
    Registrant:
    Muirhead
    Mattie (wm@needupdate.com)
    517 S Kirkman St
    Florence
    Alabama,35630
    US
    Tel. +001.256767790

    I did a registerysearch for all occurances of spyaxe and nscornet and removed them. I never would have cleared this up without the information on this page.

    Thanks,

    paul – http://mouseranch.com

  • Guest

    I have tried Similar but not exact instructions from another website…the thing is out of the files i need to delete no matter how hard i search for it even using show all hidden files and folders i CANT find or dont have “svchosts.dll” i have a “svchost.exe” and a “svcpack.dll” but not that particular file can anyone make a suggestion?

  • Guest

    instead of file svchosts.dll file there can be ioctrl.dll. delete it in safe mode.

  • Guest

    yes, for me it was also ioctrl.dll and i could delete it in safe mode… it was in my program filessystem32 folder… once I did this, I ran several different spy killer programs to eliminate any vestiges of it… webroot spy sweeper, ewido, and adaware are what I used, all are either free or have free trial versions, you can get at downloads.com…. good luck everyone!

  • Guest

    SPYAXE can be killed easily with SPYWARE DOCTOR.

  • Guest

    Spybot secretmaker microsoft antispyware and system restore stopped and fixed this from a porn surfing session. I have formated my computer many times because of this shit. They should have their houses burned down and their faces stammped on. God job my computer is for porn and surfing. Its no use for anything valuble like work or films and photos.

  • Guest

    ioctrl.dll wouldnt delete in safe mode or normal, and i couldnt unregister it in msdos. I deleted mscornet and mssearchnet and my processes and registry seem fine now, but I still have spyaxe being re-installed on my comp, and that annoying system tray icon

  • Guest

    I could never have done it without your help. I´ll definitely reccommend you. Thanks a bunch!
    HH

  • Guest

    I cannot believe it but I just removed spyaxe!! after 2 days of that incessant pop up bubble.
    This is what I did. I used the search function on my computer to locate all the files that begin spyaxe. After locating the files, I manually deleted them. Then I used the search function again to locate Ioctrl.dll (one of the other posters said this file was part of the spyaxe hijack), Once I found it, I attempted to delete it manually as I did the other files but it would not allow me to because it was in use, so I went straight to the file where it was located, dragged it over to the desk top and rebooted my computer. Sure enough, that piece of crap tried to reinstall on start up but my Spy Sweeper caught it and removed it before it could do any harm. I then dragged the Ioctrl.dll to the recycle bin and flushed it away, and the pop up bubble and that annoying sound are gone. I just saved between $129.00-$229.00 as I had scheduled to have Geek Squad come to my office this coming Tuesday. Do these people really think that is a good way to market their product. I was ready to pay over $200 to have it removed. I hope this is useful to others. Scott

  • Guest

    SPYWARE DOCTOR also worked for me easily. Thanks for the advice!

  • Guest

    The program MoveOnBoot can remove the horrid SpyAxe as well as the programs stated here. How many are interested in a class action suit? Do we know who we are suing yet?

  • Guest

    thank you, thank you, THANK YOU!!!!

  • Guest

    wonnderrfull, absolutely brilliant – i deleted all those files and my computer not only got rid of spyaxe but it also is now like 10x faster for sum reason 😀

  • Guest

    Wonderful, after a week battling with Spyaxe (even my McFee suite didnt stop it) I used your notes to delete this nasty bit of rubbish off my PC.
    Someone in NZ should go round to their place and shoot the lot of them A bunch of scumbags.

    Again many thanks for the tips !!!

    Steven

  • Guest

    Excellent, your clear and supportive instructions helped a Regedit novice fix this problem manually. I had to use safe mode to delete nvctrl.exe as this was automatically activated on startup and kept restarting after a task manager end process command (in about 2 seconds).

    Another possibly helpful piece of info is that Spybot thought I had Smitfraud-C. but this was actually detecting some entries installed by SpyAxe in HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerrun, so have a look at this also and delete any refences in this area to the files mscornet.exe, mssearchnet.exe, nvctrl.exe, spyaxe.exe, ioctrl.dll, svchosts.dll and hp[X].tmp. Hope this is helpful to someone. Si

  • Guest

    I cound not end the processes or delete the files, so I removed all NTFS permissions to the above and rebooted – Fine now! PLUS I will never get this particular strain again ! WOOT

  • Guest

    SPYWARE DOCTOR has rid me of this malicious crap. Now all I need is a kind person to supply the adress of these $hitehawks so I can arrange a visit.

  • Guest

    I had no clue that it was a virus thnx to you guys i can get rid of that …

  • Guest

    ok, ran spybot, spy doctor, adaward, ewido, smitrem, could not find any of the registry keys or .dll files listed above and it keeps coming back…any suggestions?

  • Guest

    I too, could not find any of the dll or exe files or registry keys listed above. I only found the spyaxe.exe by going into the C: command prompt and doing a dir command on C:program filesspyaxe.
    I deleted it but the two icons in the system tray keep appearing. I read another article that said multiple accounts on XP might cause some extra fix issues. Can someone help please!!

  • Guest

    Spy Doctor was unable to remove SpyAxe

  • Guest

    I think the makers of spyaxe somehow updated their malware. I tried to do the manually steps, cant even find one of the files, except the programfiles/spyaxe ones, but those are useless since they are beeing reinstalled by something else. I also tried to use other tools, spyfix, remfit, adaware, spybot etc.etc. all the ussual stuff i think, none of them worked. No ioctrl and the other .exe files.

  • Guest

    I tracked this down and the registrant for Spyaxe.Com is:
    Sunshine Ltd
    David Taylor (david.alant@gmail.com)
    187th Ave, 5 King County
    Seattle, WA 98101
    206-954-3154
    Doman was created 8/31/2005
    Website Title is “SpyAxe: One of the most technologically advanced applications on the Internet for detection and removql of all forms of Malware”. HA !!!!!
    I propose that anyone who has been affected by this insidious intrusion e-mail the contact information above. I myself am considering legal action or at least a restraining order to put this individual out of business. Any advice, email girlgeekdel@gmail.com.

  • Guest

    Indeed a lawsuit would be brilliant. Imagine how may people avtually bought his product?

  • Guest

    Got a fix…ran Spy Doctor, Ewido, Adaware, and smitrem all while logged in in Safe Mode as the Administrator. Then deleted the profile I usually use (after copying MyDocuments, Favorites, Desktop, etc. to a new account of course). It seems to be gone now.

  • Guest

    I just got rid of SpyAxe. I had the same strand that was mentioned below by Guest. 28/12/2005. 08:12:42. Stopzilla efectively removed spyaxe from the system. I tried many remedies prior to this (Xoftspy, spybot, (the trio of Smitfraud, Ewido and Adware-SE), Mcafee virus plus spyware, Etrust Pest Patrol, the microsoft spyware) to no evail. I am not a spokesman for Stopzilla, but it worked. Will have to pay a few dollars though when the trial period expires.

  • Guest

    Thanks for the info. Switched to Safe Mode and removed the files and everything seems OK. I did not have to modify the Registry Values as they were already cleam? I still get the error on my Norton Anti virus start-up.

  • Guest

    I just got rid of SpyAxe. I had the same strand that was mentioned below by Guest. 28/12/2005. 08:12:42. Stopzilla efectively removed spyaxe from the system. I tried many remedies prior to this (Xoftspy, spybot, (the trio of Smitfraud, Ewido and Adware-SE), Mcafee virus plus spyware, Etrust Pest Patrol, the microsoft spyware) to no evail. I am not a spokesman for Stopzilla, but it worked. Will have to pay a few dollars though when the trial period expires.

  • Guest

    i done everything i here and at like 50 other site. and it doesnt show up but the ballons still show up?????

  • Guest

    I corrected this nuisance by doing a system restore. I plan to block the IP too.

  • Guest

    Since Spyaxe is mimicking Windows messages…. one would think the Microsoft lawyers would be on this…

  • Guest

    hi
    i m getting this msg that my comp is infected from malware
    i m trying to remove it but its keep poping
    can anyone have solution pls help me

  • Guest

    Microsoft Anti Spyware Beta 1 version does not kill spyaxe. Hope this other download does

  • Guest

    Hi, we have been plagued with this trojan – we were recommended adware – which is free to down load – it seems to have done the trick but took several attempts – had to switch off the restore point then run adware – then put restore point back on -!

  • Guest

    i need help, cant find mscornet in processes and everytime i end one of the process, its restarts itself

  • Guest

    Believe it or not, spyaxe prevented me from downloading removal software. Stopzilla would not work unless I paid them immediately. Mssearchnet.exe kept returning every time I deleted it in taskmanager, and some of the registry values did the same.
    I then tried system restore and went back two days. Nearly everything vanished. Spyaxe was renamed spyaxe(2) and the whole folder was then manually deleted from My Computer/programme files.

    Was I lucky or what?

  • Guest

    THANK YOU!!! – Spent a whole day trying to get rid of SpyAxe from our system, it had loaded itself on our computer and then kept popping up for us to download the anti SpyAxe ware and stating that the computer was infected.
    Did not know how to clear it until we found your advice on the Internet. Worked first time. Very grateful for this help. Could have found something better to do with my days holiday so no thanks to the person who created it to start with.
    Just for info also read a piece from Infopackets.com that states it is recommended that you visit the Windows update web site to install the updates that were released on December 13th which eliminate this problem occuring. GOOD LUCK.

  • Guest

    Me too. I cant find mscornet in processes and everytime i end one of the process, its restarts itself too. Help!

  • Guest

    The new update of Adware-SE 12-28-05 took care of the annoying pop-up box on the tool bar. Seems to be gone.

  • Guest

    Where is the government in this scam? One guest says he traced the person and domain of this theif. This guy should get 10-20 years for his self promotion of hacking into computers.

  • Guest

    I followed the instructions above. I then restored my PC to a previous safe point. After rebooting, I then went to Windows updates and downloaded the new security fix. No other evidence of infection so far. I could not find mscornet in my registry either. I have both McAfee and MS Beta spyware removers and they did not catch it. Spyaxe even altered my NcAfee Anti-virus automatic update feature wherein I had to re-install it.
    Best of luck to you. Spyaxe is malicious and sucks to get rid of. It initially prevented me from even accessing the Internet.

  • Guest

    SPYWARE DOCTOR helped a lot, but did not get it all. Appears that these guys change their “plants” to keep their thing going. DOCTOR did remove most everything – but the system tray appearance kept alive. I finally did a search on Windows Explorer for all .dlls. Then sorted them by date and removed those few which were created during the time I thought Spyaxe appeared. One .dll would not let me delete it (wbeconm.dll). I moved it to the desktop and rebooted. That seemed to do the trick. Then I moved the culprit to the recycle bin from the desktop. So far so good …..

    This thing is nasty. Good Luck to all.

  • Guest

    I used killbox to delete wbeconm.dll. That was after following the spyaxe manual removal instructions above. That did it. Thanks to “guest” who pointed out it was that file that caused the popup balloon in the system tray.

  • Guest

    I Keep Removing It but it keeps coming back. If a lawsuit is filed, e-mail me so I can join in as well. If you could please e-mail me explaining how to get rid of it.

    danbolt@sbcglobal.net

  • Guest

    please be advised the fully updated configuration below offered no defense whatesoever to this evil cocktail fronted by SpyAxe:
    Win XP Pro SP2, all security patches installed (even some admin extras not on Windows Update)
    Avast
    AVG
    SpyBot S&D +TeaTimer & full protection
    MS Antispyware
    Ad-aware
    SpywareBlaster

    i had just reformatted over Thanksgiving, caught the SpyAxe blend just this past Thurs 12/29. reformatted again Fri, just finished this morning. I CAUGHT IT AGAIN 20 min ago. now going to try this fix posted here. i never get infected. this *$#@! thing is going to cause real probelms out there…

  • Guest

    I had the latest XP security fixed installed and was running at a high security level at the time of the invasion. I cound not find the DLL files and registry entries noted above, but it was still active. I could not remove the programs with going into safe mode. Went into safe mode. Used Windows explorer to list all EXE files, sorted by create date. There were more files than listed above. I deleted (actually erased using Eraser) all EXE files with the create date the same as the time of the invasion. Listed the EXE files again and found a couple we still present. I erased again, listed again and they were gone. Returned back to normal operating mode and all appears okay so far, at least for the last 4 hours.

  • Guest

    I wrote the 31/12/2005 19:12 comment. Saw some typo errors (and unclear text). Just to clarify – I was able to erase the programs in safe mode only. Still clean after 1 day.

  • Guest

    thanks to all who contributed to this. i just got spyaxed on my desktop this morning and this has greatly helped me in my fight to remove. Please be advised that there is a new version out (released in the last day or so) that uses webconm.dll to replicate. unregister the dll, delete the file, and follow all the instructions above and you will be good to go.

  • Guest

    There is one very important piece of information missing from the manual removal instructions! Restart your computer in SAFE mode first, and then go through the steps! Also, if you are running Windows XP, not all or maybe none of the registry values will be there, but it is good to check anyway. I am a computer repair tech, and have removed SpyAxe from several computers, and the instructions do work. I still recommend a full anti-virus and spyware scan after removal. Hope this helps!

    Steve

  • Guest

    All,

    I just followed the instructions posted by Guest #10 and it worked! It is painless and not too complicated. Just use the search function to find (wbeconm.dll), when it is found, you cannot delete it because it is busy making the warning pop up every 10 seconds. Make sure you MOVE it to your desktop, copying it will not work. You then have to restart your computer in regular mode. You will notice that the annoying pop-up is gone! Then you can take that file and delete it. This method works!–JV

    PS I hope that when they find the SOB who unleashed this, they gut him, and hang him by his entrails, I am NOT joking.

  • Guest

    All,

    I just followed the instructions posted by Guest #9 and it worked! It is painless and not too complicated. Just use the search function to find (wbeconm.dll), when it is found, you cannot delete it because it is busy making the warning pop up every 10 seconds. Make sure you MOVE it to your desktop, copying it will not work. You then have to restart your computer in regular mode. You will notice that the annoying pop-up is gone! Then you can take that file and delete it. This method works!–JV

    PS I hope that when they find the SOB who unleashed this, they gut him, and hang him by his entrails, I am NOT joking.

  • Guest

    Has anyone tried the “automatic removal software?”

  • Guest

    Ad-Aware seemed to get rid of SpyAxe for me, surely it removed it completely? I do not get that annoying pop-up in the task tray anymore thanks to it.

    I had tried Microsoft AntiSpyware, McAfee virrusscan and XoftSpy. They removed many infected files but did not remove SpyAxe, as I still had the pop-up in the task tray. Trying to manually remove Spyaxe was unsuccessful as there were no processes or registry keys found that were listed in the manual removal instructions above.

    Good luck to everyone having trouble with this nasty thing, I hope you get rid of it.

    Hope I never spoke too soon.

  • Guest

    Hi,

    I have tried to follow the steps as above. I have:
    1. startup in safe mode
    2. deleted teh files mscornet.exe, mssearchnet.exe, nvctrl.exe, spyaxe.exe
    3. deleted directory system321024 and programfilesspyaxe
    4. cannot find the dll for ioctrl, svchosts, webconm
    5. cannot find registry values as listed

    But the stupid thing still pops up at system tray and when i launch IE, it will go to a webpage called http://www.system……com

    I am at my wits end.

    Ad Aware detects but cannot remove it, so does Spybot 1.4. It is very strange. Anyone had the same problem?

    Kindly need help.

  • Guest

    Hi All !
    This nasty piece also had me too. Automatic removal software wiped out this bug in no time! It saved me so much!
    Cheers
    NFR

  • Guest

    Hi,
    for anyone who may have forgot try a system restore. Its probably best to try and remove it by hand first but if all else fails a system restore should work. I recommend you then delete all the old restore points afterwards (by turning off system restore) and then create a new restore point.

  • Guest

    I moved the wbeconm.dll to the desktop but was unable to kill the mssearchnet.exe process & the annoying pop up still kept appearing in the system tray despite numerous restarts. However when switching on yesterday (after leaving overnight) & following the automatic update for AVG Antivirus the pop stopped & various files were transferred to the Virus Vault of AVG. Adaware & Spybot were then used to remove spyware. This seems to have done the trick although not sure whether this was AVG alone or in conjunction with the moving of wbeconm.dll to the desktop. Hope this helps someone!

  • Guest

    i still get the webpage and can not find ioctrl, svchost dlls can anyone help me??
    The rest was good tnx for the tips

  • Guest

    Hi,
    I followed the instructions as mentioned by guest 8 and 10 and managed to eventually get rid thing!! However a small typo on the manual removal instructions, webconm.dll should read wbeconm.dll.

  • Guest

    this is the guy to contact

    The spyaxe.com registrant, administrative and technical contact is listed as:

    David Taylor

    U-12 Gamma Commercial Complex #47 Rizal Highway cor. Manila 187th Ave S. (?)

    Seattle, Washington 98101

    Phone: 206 339 5073 Email:david.alant@gmail.com

    Give him a call or email, tell him what a good job they are doing there!

  • Guest

    xoftspy is from the spyaxe company, dont download

  • Guest

    i just found out i also have Spywarestrike and its the same as spyaxe but cant remove it

  • Guest

    Infected with spywarestrike today.Spent all day trying to remove it without success. The above does not work as not all of the files listed are installed. Main problem is the constant pop up syaing a System Intrusion has been detected.

  • Guest

    I have had this on my pc sense Jan 3, I have tried all of the above and so far nothing is removing it. It started out as Spyaxe now it is Spystriker.

  • Guest

    The installers for SPYAXE and SPYWARESTRIKE were found in the TEMP folder in WINDOWS.

  • Guest

    Thanks for all your help. I used some of your ways to get rid of SPYAXE. People can also try removing the SPYAXE installer which can be found in C:/Windows/Temp. Search the Temp folder for the SPYAXE installer. Once you get into the temp folder right click go to arrange icons and arrange them under modified and scroll all the way down and look for any files hidden in the temp folder that were created on the day and time you recieved SPYAXE.

  • Guest

    I located a fille named netwrap.dll and moved it to my desktop. The file will not allow me to delete. Any ideas? When I moved this file to my desktop that pest at the right bottom of the screen disappeared.

  • Guest

    I did the same thing by moving the netwrap.dll file to the desktop. Right click on it and change its name. Make it a word file then reboot the computer and then you should be able to delete.

  • Guest

    I used the uninstall tool under C:programfilesSpyAxe, then botted up in safe mode and followed the manual instructions above. Most reg items were not found, sorry I did not list whcih ones I did find and remove. I did find and remove a couple of the .exe and .dll files, again i did not make a list, sorry. Found and deleted all directories except C:WindowsSystem1024 ( could not find ). Then I ran Spybot and Ad-Aware in safe mode. Spybot found nothing, and Ad-aware found one more SpyAxe related entry and succesfully removed it. Rebooted normally and so far SPYAXE IS GONE!!!! No popups in the tray (as of yet) I will keep my fingers crossed. I hope this works for you. I have been battling this since 12-27. P.S. anyone know if these popular anti spy-ad-malware programms will include definitions to all the sneaky little hidden files this malware produces? Are they aware of it?

  • Guest

    Hi all, after spending 2 days trying various software etc, i finally got shot of spyaxe by doing as someone suggested. I located a fille named netwrap.dll and moved it to my desktop, renamed it, rebooted and deleted it. THANKYOU for all your help

  • Guest

    I had SpyAxe.exe, got rid of it and now I have Spywar Strike, which is exactly the same thing with a different name. Does anyone know of a fix for this new one??

  • Guest

    Well I have SpyAxe trojan virus and am currently downloading the software to remove it. I have Ad-Aware and I have AVG also running internet explorer, aol explorer and am downloading firefox. I have reset the system, rebooted, debugged, and scanned for about three days. I hope that this software does the trick I have even deleted my user accounts on the computer and renamed and rebuilt them all. Thanks for the support and may God Bless all of us. Thanks again. AJ from NC

  • Guest

    I gotSpyAxed back on 12/30. I found in my research that the company is using multiple IPs. After doing a System Restore, I blocked the following IPs, using IE “Restricted Sites” under the security tab; in the form of:
    80.77.8x.0-255*
    80.77.9x.0-255*
    where x= digits 0-9.
    20 entries (a pain), but I have had NO Spyaxe, SpyStar or Spy-anything since.

  • Guest

    The best way I have found to get rid of this crap is to use an “offline” tool such as ERD commander. Because you accesses your drive without Windows running, you do not have to worry about locked or running processes. Just delete the registry entries and files.

  • Guest

    2-spyware.com

    The procedure you had listed worked great. Thankyou for your trouble shooting efforts.

  • Guest

    I had MS Spyware installed and it finds spyaxe but cant clean it completely. It trys to restore its self imediatly on reboot. MS only found spyaxe buy the above software found an additional 667 infected file straight after MS ran.

  • Guest

    ran the exe. then ran ad-aware no more spy axe. also checked through manual setting to make sure everything had been removed, all good 🙂

  • Guest

    I had all of the same problems with spyaxe. This guy below saved my sanity with his program which is free and I followed exactly. Within 5 minutes my computer was clean.

    His name is NoahDFear and his site is http://noahdfear.geekstogo.com

    Diane

  • Guest

    Super short version. Find the files listed above in the gray box under: “Kill processes”, “Unregister DLLs” and “Delete files”. Rename them. I suggest .old or put a $ in front of the namel. Delete the directories listed under “Delete directories”. Open msconfig, go to Startup, UNcheck “spyaxe” if it is there, it probably will be. Click “Apply” then click “OK”. Restart your computer. When that is done, find the files you just renamed and delete them. You can find them by their old names or by searching .old or $ whatever the case may be. The true test will be if you restart your computer and all the bad stuff is gone and all the good stuff works like it is suppossed to. After all this, update Windows and while you are at Microsoft, find and download Microsoft AntiSpyware (Beta). After that, go to Download.com and download FREE versions of: Zone Alarm, Ad-Aware SE Personal, Spybot Search & Destroy and AVG Antivirus. Keep these programs and Windows up-to-date. Run your antivirus and anti-spyware often. Bye. Josh. John 3:16. : )

  • Guest

    Note to Web Master, this Post Comment area does not work sometimes. Sometimes you will click Post Comment and you will get an error message and everything you have just typed will get deleted.

  • Guest

    I have read a lot of good things about SmitRem. You can Google SmitRem to find it or go to noahdfear.geekstogo.com as mentioned below by Diane. Much Love!! ; )

  • Guest

    Great. Worked a treat. Another happy computer user restored. thanx

  • Guest

    Thank you! Thank You! Thank You!!! The manual procedure took me about half an hour and so far (about 20 minutes) and no sigh of the spyaxe popup
    George Dechow

  • Guest

    Add to last comment. When I was first infected with spy axe i had uninstalled it and deleted its directory from “Program Files” and modified a few register paramaters. I ended up with the little pop-up at the bottom right of my screen and the little “tunk” sound and have indured that 4 months. spy Axe has been gone for most of a day and still seems to be no return.
    Thanks again
    George Dechow

  • Guest

    ok, im new here, my friends pc has spywarequake. poping up on booting ..is this the same & what do i do . He gave me a bit of paper saying Trojan horse exploit donloader zl0b.ls
    …am i on the right board??

  • Guest

    This comment is for the person with Spywarequake. Yes, you have come to the right place for help. I can't help you, but I highly recommend that you go here:

    https://www.2-spyware.com/forum/topic454.html

    I hope you can find the help that you need. Good luck! 🙂
    Much Love, Josh 🙂

  • Guest

    George Dechow, this comment is for you. The easiest way to get rid of Spyaxe is to use a program called SmitRem that you can get for FREE from: noahdfear.geekstogo.com.
    I used to have the same problem as you when I had Spyaxe. I also had that annoying “tunk” sound on my computer. It drove me nuts! I feel your pain man :(. To get rid of that sound manually, here are the directions…
    George, you will have to do the following steps while disconnected from the internet, so print them, or write them down, or something.
    First, disconnect your computer from the internet. This first step is very impotant. You MUST be disconnected from the internet for this to work. I don't know what kind of internet set-up you are useing so you will have to use your own disgression to disconnect yourself from the internet. Personally, I have DSL, and unplugged the phone wire from my DSL modem. Next, use Window's “Search” feature to find ” mssearchnet.exe “. When you find it, RIGHT-click on it and RENAME it. Put a dollar sign in front of the name and hit “Enter”. It should now read ” $mssearchnet.exe “. Next, close all programs and RESTART your computer. When your computer comes back up, find $mssearchnet.exe again, and DELETE it. Close all programs and TURN OFF your computer. While your computer is off, re-connect your computer to the internet. Wait 5 minutes and turn your computer back on. Since you were disconnected from the internet, you might have to use the software for your internet service to reastablish an internet connect. You probably won't have to do this, but if you do, it is a very simple process which you might already be familiar with.
    This should fix your problem. Sorry it was so long. Please post again and let me know how it went.
    Much Love, Josh 🙂

  • Guest

    i am in the process of trying to get this off my pc..
    just wanted to let youy know that on my pc it seems to be running under dcomcfg.exe in my windows task mngr./ processes

  • Guest

    I just contracted the zlob trojan downloader this morning. i kept running everything i had, but it was still coming up. Finally, I ran microsoft antispyware (its free). its only been an hour or so, but it isnt popping up now, like it was before. I also ran MS antispware again, and it came up with nothing.

  • Guest

    how do I remove the w.32.zlob.gen virus off my computer, it is in my system volume info

  • Guest

    I'm manually deleting SpyAxe, should I delete all files named hp[Four random digits and letters].tmp, even if there are five or six of them? If you knoww please post an answer.

  • Guest

    author of SpyAxe

  • guest

    R1 – HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = local;*.local

    thanks, this object is dangerous?

  • boyaci

    very beautiful site

    boyacı
    ev boya tadilat
    dış cephe boya mantolama
    çatı onarım tadilat