I was surfing the other day on the internet and I saw a message on my toolbar
(like an update message with the same icon) at the bottom that says "Your
computer is infected! Windows has detected spyware infection. It is re
commended to use special antispyware tools to prevent data loss. Windows will
now download and install the most up-to-date antispyware for you. Click here
to preotect your computer from spyware."
I have been trying to get rid of it, but the "helping" program they try to
make me download and i nfact is downloaded and installed is called Spyaxe
3.0, wich I found out by Ad-Aware that is in fact and adware, but everytime
it's removed the message gets there and Spy Axe keeps reinstalling itself
everytime I reboot...I actually haven't seeing any difference in my
connection speed, but the message keeps popping up, along with another ones
that are very similar.

There are also some weird programs installed between them one called
mssearchnet.exe and other one called hp759.tmp wich is a HomepageBHO wich
Microsoft Antispyware can't seem to totally erase, and when I try to do it
manually, I get a message saying that it can't be erased because it's used by
other host or program, well that is what I have, I hope some help on how to
erase these annoying programs, please help....My anitvirus is Norton
Anitvirus 2003.

Hi,
Register and post a HijackThis log to one of these forums for additional
help. Look for the proper forum and an "Important- Read This First" message
so that you follow proper procedure.

* HijackThis Quick Start
http://www.tomcoyote.org/hjt/#Top
* HijackThis Tutorial and Download
http://www.bleepingcomputer.com/foru...howtutorial=42

http://forum.aumha.org/viewforum.php?f=30 Be sure to read
http://forum.aumha.org/viewtopic.php?t=4075

http://castlecops.com/forums.html
http://tomcoyote.com/forums/
http://www.bleepingcomputer.com/forums/
http://forums.spywareinfo.com/
http://www.spywarewarrior.com/index.php
http://forums.maddoktor2.com/index.php
http://www.atribune.org/forums/index.php?showforum=21

Other useful sites:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
The Parasite Fight http://www.aumha.org/a/quickfix.htm
Malware Removal and Prevention Overview - CastleCopsWiki:
http://wiki.castlecops.com/Malware_R...tion:_Overview
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.html
Removing Malware:
http://www.elephantboycomputers.com/...moving_Malware
What you can do about spyware and other unwanted software:
http://www.microsoft.com/athome/secu...ywarewhat.mspx

Hope this helps,
Don
[MS MVP- IE]


"Ed" <Ed[ta]discussions.microsoft.com> wrote in message
news:5C760526-A674-4285-A2DA-(E-Mail Removed)...
> I was surfing the other day on the internet and I saw a message on my
toolbar
> (like an update message with the same icon) at the bottom that says "Your
> computer is infected! Windows has detected spyware infection. It is re
> commended to use special antispyware tools to prevent data loss. Windows
will
> now download and install the most up-to-date antispyware for you. Click
here
> to preotect your computer from spyware."
> I have been trying to get rid of it, but the "helping" program they try to
> make me download and i nfact is downloaded and installed is called Spyaxe
> 3.0, wich I found out by Ad-Aware that is in fact and adware, but
everytime
> it's removed the message gets there and Spy Axe keeps reinstalling itself
> everytime I reboot...I actually haven't seeing any difference in my
> connection speed, but the message keeps popping up, along with another
ones
> that are very similar.
>
> There are also some weird programs installed between them one called
> mssearchnet.exe and other one called hp759.tmp wich is a HomepageBHO wich
> Microsoft Antispyware can't seem to totally erase, and when I try to do it
> manually, I get a message saying that it can't be erased because it's used
by
> other host or program, well that is what I have, I hope some help on how
to
> erase these annoying programs, please help....My anitvirus is Norton
> Anitvirus 2003.

On Tue, 6 Dec 2005, Ed wrote:

>
>
> I have been trying to get rid of it, but the "helping" program they try to
> make me download and i nfact is downloaded and installed is called Spyaxe
> 3.0, wich I found out by Ad-Aware that is in fact and adware, but everytime
> it's removed the message gets there and Spy Axe keeps reinstalling itself
> everytime I reboot...I actually haven't seeing any difference in my
> connection speed, but the message keeps popping up, along with another ones
> that are very similar.

The mssearchnet trojan is brought to you by the scumbags inhoster in
russia and their stooges in the united states who give them bandwidth with
no questions asked.

But anyway, boot into safe mode and rename these files in your
windows/system32 or winnt/system32 directory to something else.
I recommend to do this from the cmd prompt.

ldbd7a.exe
mscornet.exe
mssearchnet.exe
nvctrl.exe

and in winnt/temp rename

hp852a.dll

Not sure about spyaxe, there might be more that needs to be renamed.

Hello,

To remove SpyAxe, you may wish to try Super Ad Blocker with
SUPERAntiSpyware:
http://www.superadblocker.com

Super Ad Blocker is designed to be quick and easy for end-users with no
complicated setup or configuration.

On a technical side, Super Ad Blocker | SUPERAntiSpyware offers several
unique features such as using a system level driver to delete detected
items, so pests do not come back once detected and cleaned.

Super Ad Blocker offers a fully functional 15-day trial. You can scan
and clean your computer and then remove Super Ad Blocker if you do not
wish to keep it. We do appreciate when users support our development
efforts by purchasing the product

If that does not find and/or remove the spyware/adware on your machine,
you can submit a diagnostic and I will diagnose your machine for free
and post the results back to the group and update our rules with
anything found:
http://www.superadblocker.com/diagnostic.html?id=nicks

You may also wish to "see" what is running on your computer here:
http://www.fileresearchcenter.com

Nick Skrepetos
SuperAdBlocker.com - SUPERAntiSpyware
http://www.superadblocker.com
http://blogs.superadblocker.com
http://forums.superadblocker.com

BootSafe - Making booting to Safe Mode a snap! 100% free product.
http://www.superadblocker.com/bootsafe.html


** Please note that I am the author of the above programs and sites and
I do have a vested interest in Super Ad Blocker, SUPERAntiSpyware and
FileResearchCenter.com. You, the user, have no obligation to purchase
the software and are free to try the software, clean/fix your system,
and then uninstall.