Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

SpyAxe 3.0 Purchased

Dec 29, 2005 1:40PM PST

Hello everyone, this is my first time posting on this site though i have been visiting for quite some time. I have encountered a very serious problem: my father becomes very frusterated with computers, and often jumps to ridiculous conclusions. Apparently around 1am last night while trying to solve a virus problem he encountered SpyAxe. He said he was very angry and ready to do anything to solve the problem, so he downloaded it and purchased the program through credit card. He is not worried, though i beleive this is very serious. I'm only 16, and dont have much knowledge on credit cards. Any help on the subject would be greatly appreciated.

Discussion is locked

- Collapse -
Adware-Spyaxe
Dec 29, 2005 2:13PM PST

This is not a virus or a trojan. It is detected as a "potentially unwanted program". This is an anti-spyware application claiming to remove unwanted malicious spyware programs. In an attempt to get you to purchase the full version of the product, it may be installed by a Trojan (see Spyaxe ) which will display fake warnings (some appearing to be Microsoft Security Center or Windows Update warnings) which may lead you to believe that your computer is infected with malicious spyware programs. In order to clean or delete any files labeled as ?malicious spyware?, you must first enter a valid serial number to activate the full version or click on the ?Buy Online? button and purchase the full version.

Have a look here:

http://vil.mcafeesecurity.com/vil/content/v_137422.htm

- Collapse -
SpyAxe 3.0 a real pain!
Dec 30, 2005 10:18PM PST

I sent that company a message telling them that there was no way i would buy there product.I also told them that i consider there product to be malwae as i dont want it , didnt ask for it, and am trying to remove it.I have used the add and remove programmes to get rid of the programme but the little popup window above the icon try is annoying........ hope someone can tell me how to get rid of this annoying programme . thanks for your help

- Collapse -
In addition to the link provided by
Dec 30, 2005 10:59PM PST
- Collapse -
SpyAxe is holding computers and browsers hostage for ransom
Dec 31, 2005 4:44AM PST

Tell your father to call credit card company to cancel transaction since it was under duress.
Also please post their login key so others can rid of their nasty spyware for free.
I never had any problem till this nasty unwanted 'helper' arrived last night.
There is also a popup blocker type message that shows up now to direct me to another of their nasty accomplices.
There should be legal action againt these morons.
Thanks

- Collapse -
Will anyone join me in a class action lawsuit against them
Dec 31, 2005 6:36AM PST

I too have had it with these types taking my computer hostage. I ha ve emailed them and told them that if that message was still in my sys tray on Tuesday morning that I will contact my lawyer to initiate a class action lawsuit.

- Collapse -
Class action lawsuit for SpyAxe
Jan 1, 2006 1:37PM PST

I agree with you. Do you have the business owners' names, address, and phone number(s)?? I'd like to help. Maybe a disgruntled victims "virus" attack to the perpetrators would make a difference.

- Collapse -
got attacked
Jan 2, 2006 12:14AM PST

had to spend 29 buck to buy webroot spy sweep, got rid of spyaxe, what a pain!! they highjacked my IE, that company needs to be suied!!

- Collapse -
spyaxe contact info
Jan 2, 2006 5:23AM PST

The spyaxe.com registrant, administrative and technical contact is listed as:



David Taylor

U-12 Gamma Commercial Complex #47 Rizal Highway cor. Manila 187th Ave S. (?)

Seattle, Washington 98101

Phone: 206 339 5073 Email:david.alant@gmail.com

Give him a call or email, tell him what a good job they are doing there!

- Collapse -
how to file a complaint about the spyaxe
Jan 2, 2006 5:29AM PST

strongly encourage all of you who have had problems with SpyAxe infecting your computer to go to the Federal Trade Commission's website to file a complaint about the SpyAxe virus:



http://www.ftc.gov/



Follow these simple directions to file a complaint at the FTC's website:



1) Click on "File a Complaint" (top third of the page in the center);

2) Choose "Computers/Internet Services" in the "Subject of Your Complaint" drop-down box;

3) Write "SpyAxe" as the name of the company you are complaing about;

4) Write "http://www.spyaxe.com/" as the company's website;

5) Explain your problem with SpyAxe in the "Explain Your Problem" section;

6) Click "Submit Complaint."



I can assure you that if the FTC gets flooded with complaints about SpyAxe, they will investigate this company and eventually put SpyAxe out of business.

- Collapse -
spyaxe
Jan 6, 2006 11:50PM PST

Went to ftc site and filed a complaint. Hope all following this thread did the same. Found out that I can't start a class action lawsuit. Can file suit but a judge must grant class action status. I have started dialouge with online legal site to see if they will take the case for us. They need to go after spyaxe a--holes and Microsoft. MS knows/knew they had holes but just seem to blow it off. Good site to find out how tight your security is www.grc.com. Mr Gibson is a regular on Leo LaPort. He also has been warning MS for years about their holes. He does everything in pure assy language.

- Collapse -
Spyaxe
Jan 2, 2006 10:33AM PST
- Collapse -
SpyAxe/SpyTrooper Removal
Jan 3, 2006 11:50AM PST

Hi all, didn't read all of these threads but thought I'd pipe in with my experience over the weekend with removal of spyaxe. I have not spent any money and neither should any of you. First I worked through ewido,SmitRem and Ad aware as noted via http://noahdfear.geekstogo.com/

Upon restart I still had performance issues but no spyaxe ! I reinstalled XP and have yet to fix all that this pain has caused. I'd like to join that law suit. In any event here are some other good precautions and preventive measures:

Prev X is a good tool have you the latest, you can get a free version here it's a beta but it's stable!

http://free.prevx.com/


the smitrem.exe should have taken care of it! Even if it does not a panda scan would shown this file and by deleting it it's bye bye smitfraud/spyaxe.

ioctrl.dll <--- this is the file which respawns spyaxe! Delete it and it's gone!


Also download and use these tools for added protection!

here's some free tools to keep you from getting infected in the future to stop reinfection get these two tools, spywareguard and spywareblaster from

http://www.javacoolsoftware.com/downloads.html

get the hosts file from here.

http://www.mvps.org/winhelp2002/hosts.htm

put it into :
Windows XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC
Windows 2K = C:\WINNT\SYSTEM32\DRIVERS\ETC
Win 98\ME = C:\WINDOWS

ie-spyad.Puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
https://netfiles.uiuc.edu/ehowes/www/resource.htm

Use spybot's immunize button and use spywareblaster' enable protection once you update it. you can put spybot's hosts file into your own and lock it.


I would also suggest switching to Mozilla's firefox browser, it's safer, has
a built in pop up blocker, blocks cookies and adds. Mozilla Thunderbird is also a good
e-mail client.

http://www.mozilla.org/


Read here to see how to tighten your security:
http://forums.techguy.org/t208517.html

A good overall guide for firewalls, anti-virus, and anti-trojans as well as
regular spyware cleaners.

http://www.firewallguide.com/anti-trojan.htm

Hope I've shed some light on this issue.

- Collapse -
class action law suit
Jan 3, 2006 10:26AM PST

I am working on the info needed to get this started. I will keep everyone posted. Dave.

- Collapse -
LAWSUIT AGAINST SPYAXE
Jan 9, 2006 3:15AM PST

I have at least ten folks who want to be a part of this lawsuit. After I was infected some time ago, I set up a blog where victims can come together and figure out how to laucnh a class action suit. None of us are in it for financial gain, but we all want to see SpyAxe shut down, and the parties responsible thrown in prison.

Please contact me via www.suespyaxe.blogspot.com

- Collapse -
Spyaxe removal
Dec 31, 2005 11:04AM PST

I downloaded a trial version of Webroot Spy Sweeper that seemed to remove spyaxe. Also using your computer's system restore feature may also solve the problem. I also agree that SpyAxe's behavior should be considered criminal!

- Collapse -
SpyAxe related trojans?
Jan 1, 2006 6:40AM PST

So spyaxe barged its way onto my laptop last night, accompanied by Norton FREAKING OUT. It has identified 2 trojans on my computer that showed up at the same time as spyaxe. I've identified the files in my registry and deleted them, and used adaware to supposedly remove spyaxe. But after a reboot, I'm still getting the ******* fake "Your computer is infected!" thing on the taskbar that leads me to spyaxe, and the 2 files I deleted are back in my registry.

Are the trojans and spyaxe related? Are they what they make you pay to remove? Is there anyway to get rid of the damn things?

- Collapse -
Try This
Jan 1, 2006 8:12AM PST
- Collapse -
try this its may works for you
Jan 2, 2006 5:48AM PST

HI THERE

thank you guys ...i finally was able to get this fixed

Try downloading KillBox and deleteing wbeconm.dll (c:\window\system32\...wbeconm.dll) its solved the broblam for me The file to download is on http://www.bleepingcomputer.com/files/killbox.php. A manual is on http://forum.malwareremoval.com/viewtopic.php?t=320

After that you can UPDATE and run EWIDO or NORTON ANTYVIRUS and deleteing everything that have to do with SPY.AXE .

I?m not a pro in this stuff but its works for me hope its will do the same for you .USE AT YOUR OWN RISK !

- Collapse -
recomnded to turn off system restore till its back 2 normal
Jan 2, 2006 6:24AM PST
- Collapse -
Spyaxe removal
Jan 3, 2006 1:58PM PST

I try every thing i could do to get rid it adaware,spybot,symantecanti virus It remove it and it would come back. I had to format hard drive and reload windows .I think its criminal and should hung!!!

- Collapse -
Check your registry.
Jan 1, 2006 1:48AM PST

No matter what method is used to remove spyaxe or restore your system make sure you check the registry. I restored my system to December 25th and then checked the registry. There was still an entry there for Spyaxe.

I also found a shortcut on my desktop entitled "hiddendevices.exe". I don't know if it's connected to the problem but if you find it on your desktop you may want to delete it.

Good luck.

- Collapse -
People like your friend are why spyware exists
Jan 4, 2006 9:28AM PST

I can't believe your friend actually spent money with those people. He/she and the thousands of people like him/her are exactly why these people continue to exist.

I also got infected by this virus (don't tell me it's not a virus, it absolutely is and I resent mcafee and anyone else saying that it's only "undesirable"). I've spent all day getting rid of the monster and I'm left with a very sluggish machine. The cleanup process did a few things that really hurt this systems performance.

For the record, the MS security update DOES NOT protect you from this thing. My system was/is fully up to date. I also run AVG, AdAware and Spybot and have two firewalls (one in my DSL router and the other lame one in XP). I still got hit. As an IT professional I'm pretty knowledgable on what to click and what not to. This time though just going to some web page took my whole system down.

I'm adding one more thing to my normal list of precautions.

I'm never again using Internet Explorer unless I'm at a site that absolutely requires it. Firefox for me all the way.

The rest of my recommendations:
Forget Outlook and Outlook Express - the second most attacked program (behind IE). I happen to use Eudora for email, but you can pick one for yourself.

Also turn off your email preview and display HTML settings in your email. This SpyAxe thing can just as easily be caught by accidently previewing spam. Yes, this is a real pain if you get anywhere near as much spam as I do, but with gaping holes in our operating systems like we have here it's a big risk to preview html messages from spammers, you might as well open up a Explorer window and click on their website as preview that bogus message.

Sorry for the rant, but I'm royally ticked off about this darned virus. Why our government doesn't go after these people with all the technology at their disposal is beyond me. Same thing for the lawyers, stop suing MacDonalds for scalding coffee and put these SpyAxe guys in jail instead.

/RANT

- Collapse -
(NT) (NT) Sounds Like You (like me) Hit Via WMF Exploit ! Patch!
Jan 4, 2006 3:43PM PST