Spyware-SpyAxe-Strike

[Guest]

Hello-I am new to the newsgroup but really need help. My computer has been
infected by Spyaxe and Spyware Strike (does this happen from new computer
games installed)?

I have been reading some of your posts and have completed the following:
Downloaded and ran SmitRem and SmitFraud. Tried to scan with Trend
Housecall but my computer hangs. Did an couple Ad-Aware scans.

Since then, my homepage has reverted back to MSN (a good thing) but the
flashing red Icon in the tray is still evident as is the annoying pop up
"Your computer is infected! Dangerous infection..."

Can you suggest the next steps I should take?
Thank you

 

[David H. Lipman]

From: "tweed88" <[email protected]>

| Hello-I am new to the newsgroup but really need help. My computer has been
| infected by Spyaxe and Spyware Strike (does this happen from new computer
| games installed)?
|
| I have been reading some of your posts and have completed the following:
| Downloaded and ran SmitRem and SmitFraud. Tried to scan with Trend
| Housecall but my computer hangs. Did an couple Ad-Aware scans.
|
| Since then, my homepage has reverted back to MSN (a good thing) but the
| flashing red Icon in the tray is still evident as is the annoying pop up
| "Your computer is infected! Dangerous infection..."
|
| Can you suggest the next steps I should take?
| Thank you

The following tool was just updated for SpywareStrike...

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.


Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
reply.

* * * Please report back your results * * *

 

[Jerusalem]

download hijack this here:
http://www.download.com/HijackThis/3000-8022_4-10227353.html


then try this website:
http://www.cybertechhelp.com/forums/showthread.php?t=101810


follow the steps to get rid of Spyware strike.

If not, I have had much success by doing a restore on people's
computers at their houses. However, in the corporate place, this
doesn't always pan out so well. So keep in mind when you do a restore
that you are taking your computer back in time including all drivers
and stuff.

Good Luck,
James Berrocales
So Cal PC Solutions

 

[Guest]

Hi Dave,

Thank you for the instructions. I have completed scanning with SmitFraud in
both Normal and Safe modes. The scan reports are below.

Unfortunately, the "annoying" infected message still pops un every 5 seconds
or so. As well, while trying to reposnd to you, my browser kept jumping to
the Spyware Strike site.

I have removed both the Program and the Registry key but they keep returning.

What's next?
Thank you.

SAFE MODE REPORT

01/11/2006 06:21:53


Options:
/ADL /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /CLEAN /ALL /DEL
/PROGRAM /EXCLUDE C:\MCAFEE\EXCLIST.TXT /HTML "C:\MCAFEE\SCANREPORT.HTML"

Scanning C: [HP_PAVILION]
Scanning C:\*.*

Summary report on C:\*.*
File(s)
Total files: ........... 177561
Clean: ................. 177503
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 2
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0


Time: 01:28.45

NORMAL MODE REPORT

01/10/2006 18:19:31


Options:
/ADL /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /CLEAN /ALL /DEL
/PROGRAM /EXCLUDE C:\MCAFEE\EXCLIST.TXT /HTML "C:\MCAFEE\SCANREPORT.HTML"

Scanning C: [HP_PAVILION]
Scanning C:\*.*
C:\Documents and Settings\Owner\Local Settings\Temp\sa23.exe ... Found
potentially unwanted program Adware-Spywarestrike.
The file or process has been deleted.
C:\Program Files\SpywareStrike\SpywareStrike.exe ... Found potentially
unwanted program Adware-Spywarestrike.
The file or process has been deleted.
C:\Program Files\SpywareStrike\uninst.exe ... Found potentially unwanted
program Adware-Spywarestrike.
The file or process has been deleted.

Summary report on C:\*.*
File(s)
Total files: ........... 177542
Clean: ................. 177459
Possibly Infected: ..... 0
Cleaned: ............... 0
Deleted: ............... 3
Non-critical Error(s): 2
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0


Time: 01:24.19

__________________________________________________________________________

 

[David H. Lipman]

From: "tweed88" <[email protected]>

| Hi Dave,
|
| Thank you for the instructions. I have completed scanning with SmitFraud in
| both Normal and Safe modes. The scan reports are below.
|
| Unfortunately, the "annoying" infected message still pops un every 5 seconds
| or so. As well, while trying to reposnd to you, my browser kept jumping to
| the Spyware Strike site.
|
| I have removed both the Program and the Registry key but they keep returning.
|
| What's next?
| Thank you.
|

It is suggested that you execute the tool in Normal Mode then in Safe Mode.

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html

 

[mystake]

I hate to be a 3rd person to butt in on this,


but if time is pressing, I can suggest www.spywareinfo.com

An excellent source for help, which will provide you with STEP BY STEP
instructions, not links to outer-sources that may not be associated to
your direct problem.

The helpers over there review YOUR specific case and will have an exact
fix for your problem, unless it prooves deeper then expected, or the
infection is worse then thought to be, and they will help fix any other
problems you may have.

 

[correotaller]

Hi,
This site could help you:
http://www40.brinkster.com/spyaxe/spyaxe-info.asp


thanks Maitre