General discussion

Locked

Spyaxe worm in IE 6.xx

By pcmaster ·
I just recently got something on my machine that does all sorts of weird things. I now have a flashing 'windows update' icon that flashes to a red circled X in my taskbar. It periodically flashes a message about my computer is infected.

I've removed all traces from my task manager and the registry I can find. But, its in my IE 6.xx and won't go away. When I start IE, it goes directly to the Spyaxe website and trys to download its spyware software.

I'm usually good at removing this crap, but I can't get this one. I have Symantec 9.0 up to date and it didn't catch it either. Anyone ever experience this? Thanks.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by JEPott In reply to Spyaxe worm in IE 6.xx

I've seen this in FireFox... here's how I got it removed...

1) Download HiJackThis;
2) Reboot the computer into safe mode;
3) When in Safe Mode, remove SpyAxe.
4) Run HiJackThis, the ?infection? I saw was HomepageBHO, delete it;
5) Run regedit and find this key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run

You?re looking for the mssearchnet and nvctrl entries - delete them outright (right click, delete).

6)Reboot

Hopefully it will be similar for IE6. You might also try the Microsoft AntiSpyware software... it has a IE hijacker remover in it.

Hope that helps!

Collapse -

by pcmaster In reply to

I had done the 3 or 4 times and it kept coming back. I did a scan with SpyTrooper and it said I was being hijacked seriously, but I don't know if I trust that software.

Collapse -

by ctrservices In reply to Spyaxe worm in IE 6.xx

You can also download SpyAxeFix.exe from http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Haven't used it yet, but would like hear from anyone if it works.

Collapse -

by pcmaster In reply to

This was too weird! I ran this tool and it took care of it smoothly. I looked at the tool and it was very simple and deleted the software in DOS mode. I had done several variations by deleting through the registry, uninstall in control panel and tried in Safe Mode several times with HiJackThis with no luck. I think I figured the problem was harder than I thought so started with the difficult approach first.

And then this simple tool does it in just a few seconds! Go figure! Thanks for the tip. I had my doubts but no longer! :)

Collapse -

by pcmaster In reply to Spyaxe worm in IE 6.xx

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums