SpyAxe 3.0 og andre spyware

[Billy Bob]

Jeg har nå i ørten timer prøvd å slette/uninstall SpyAxe 3.0 og andre ymse spyware. Jeg har prøvd NOD32 og Ad-Aware.

 

Er det virkelig ikke noe håp når maskinen har fått sykdommer i denne klassen?

 

Format C: neste?

[Billy Bob]

Etter å ha prøvd det meste som folk anbefaler på forumet, ble løsningen "format C:".

 

Lykke til dere andre som får slikt dritt.

[el-asso]

Fikk samma dritten her.

Fant en løsning som ser ut til å virke. 4 poster ned

Rename svchosts.dll (this is not to be confused with legitimate svchost.exe) to something (e.g. killme.dll).  Note the datestamp on the file ... it will be the day of infection.

 

Reboot your system

 

Delete killme.dll  (you can't delete svchosts.dll directly, as it is "in use")

 

Go to control panel / Internet Options / Programs / Manage Add - ons

 

Disable BHOHomepage

 

This should pretty much take care of it.  Start running the usual anti-virus/spyware tools to get rid of the vestiages.  Good luck.

 

 

Oppdatering:

Hjalp det noe? Neei. Da jeg kom fra jobb i dag var skjermen full av diverse popups av tvilsom karakter + at dævelskapet selvsagt var tilbake. På tide å gå grundigere tilverks. Fortsatt fra samme tråd som linket til over:

 

Download a tool called SmitRem  http://noahdfear.geekstogo.com/click%20cou.../click.php?id=1

 

Save to your desktop.  It will extrace to a folder called SmitRem on your desktop.  Don't run the tool yet.

 

Download the Ewido software (trial version):  http://www.ewido.net/en/download/

 

Install this.  During installation, uncheck the following Additional Options:  "Install background guard", "Install scan via context menu".

 

Lauch ewido, then update it.  Don't run the scan just yet.

 

Reboot the PC into safe mode.  (If you've not done this, look up how using MS help.  You will be pressing F8 during the boot process)

 

Open the SmitRem folder on your desktop, double click the RunThis.bat script.  Let it run to completion.  Don't be alarmed that this tool will do some things like remove your display background.  Its doing a thorough job of cleaning a lot of the malware from your system.

 

Now run Ewido.  Click scan, click complete system scan.  During the scan, it will prompt you to clean files, click Ok.

 

Once done, go to Control Panel / Internet Options, click the programs tab then click the "reset web settings" button.  Click apply and OK

 

Now go to Control Panel / Dispay.  Click on the "dekstop" tab, then the "customize desktop" button.  Click the web tab.  If you see any entry something like "Security Info" in the Web Pages area, select it and delete it.  Apply and OK

 

Reboot your machine... it should be clean.

 

It would now be a good idea to run a complete virus scan of your system.  Unfortunately SpyAxe is malware and not picked up as a virus on most scanners.  But, it can't hurt to look for any copies of the Trojan that was used to download it in the first place.

 

You may also choose to clean up the SmitRem folder (just delete it from the Desktop).  You may use Add/Remove programs for Ewido.  The trial version only works for 15 days (I believe).  I can't endorse whether or not its a good program to have for these kinds of problems... but it does work for SpyAxe where some others failed.

Endret 7. desember 2005 av el-asso