Internet explorer infected problem

My internet explorer has some kind of program infecting it. My home page
regardless of what i changed it to has some program which redirects me to
http://www.systemwarning.com/.
Also it creates an icon on my start menu which claims my computer is
infected, and attempts to download spyaxe on my computer.

Tried to remove using microsoft antispyware,mcafee... it removed certain
files such as search for free and spy axe, but i cant seem to get the
interenet explorer homepage chaning and the start menu icon, plus the
reattempt of spyaxe to go away.

anyone know how to get rid of these?

Frank
Tue Dec 27 12:21:20 CST 2005

"E" <E@discussions.microsoft.com> wrote in message
news:822D5208-E3C8-4C3F-82F8-E37E099C60CD@microsoft.com
> My internet explorer has some kind of program infecting it. My home
> page regardless of what i changed it to has some program which
> redirects me to http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed
> certain files such as search for free and spy axe, but i cant seem to
> get the interenet explorer homepage chaning and the start menu icon,
> plus the reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

You might be infested with malware.
What You Should Know About Spyware
http://www.microsoft.com/athome/security/spyware/devioussoftware.mspx

So How Did I Get Infected Anyway?
http://www.wilderssecurity.com/showthread.php?t=27971

Help with Hijackware
All MS - MVP Sites.
(http://aumha.org/a/parasite.htm)
(http://aumha.org/a/quickfix.htm)
(http://mvps.org/winhelp2002/unwanted.htm)
(http://inetexplorer.mvps.org/darnit.html)
(http://www.mvps.org/sramesh2k/Malware_Defence.htm)

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

Miami
Tue Dec 27 17:01:24 CST 2005

Have you found a solution for this issus?

Same thing is happening to me.

Appreciate if you can share any info.

Thanks.

E wrote:
> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

Nick
Tue Dec 27 18:45:30 CST 2005


E wrote:
> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

Hello,

I am the author of Super Ad Blocker with SUPERAntiSpyware. It will
detect and remove this problem:
http://www.superadblocker.com

Super Ad Blocker offers a fully functional 15-day trial. You can scan
and clean your computer and then remove Super Ad Blocker if you do not
wish to keep it.

You should run the scan in Safe Mode if it cannot be removed in Normal
mode.

BootSafe - Making booting to Safe Mode a snap! 100% free product.
http://www.superadblocker.com/bootsafe.html

Nick Skrepetos
SuperAdBlocker.com - SUPERAntiSpyware
http://www.superadblocker.com

E
Wed Dec 28 08:30:04 CST 2005

Tried using hijack this, spybot,adaware,super popupblocker
still cant get the warning thing on my start menu to go away, I guess ill
attempt to use the rest of the malware removal programs on the list.

"E" wrote:

> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

Nick
Wed Dec 28 10:22:02 CST 2005


E wrote:
> Tried using hijack this, spybot,adaware,super popupblocker
> still cant get the warning thing on my start menu to go away, I guess ill
> attempt to use the rest of the malware removal programs on the list.
>
<snip>

I will diagnose your machine and post the results back to the group and
update our rules with anything found:
http://www.superadblocker.com/diagnostic.html?id=nicks

Run the diagnostic in Safe Mode. Are you seeing somethign actually in
your start menu, or are you refferring to the system tray (next to the
system clock in the lower right hand section of your screen)?

Nick Skrepetos
SuperAdBlocker.com | SUPERAntiSpyware
http://www.superadblocker.com

PA
Wed Dec 28 14:56:31 CST 2005

HijackThis doesn't fix anything on its own.

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org


E wrote:
> Tried using hijack this, spybot,adaware,super popupblocker
> still cant get the warning thing on my start menu to go away, I guess ill
> attempt to use the rest of the malware removal programs on the list.
>
> "E" wrote:
>
> > My internet explorer has some kind of program infecting it. My home
> > page regardless of what i changed it to has some program which
> > redirects me to http://www.systemwarning.com/.
> > Also it creates an icon on my start menu which claims my computer is
> > infected, and attempts to download spyaxe on my computer.
> >
> > Tried to remove using microsoft antispyware,mcafee... it removed certain
> > files such as search for free and spy axe, but i cant seem to get the
> > interenet explorer homepage chaning and the start menu icon, plus the
> > reattempt of spyaxe to go away.
> >
> > anyone know how to get rid of these?

E
Wed Dec 28 17:00:01 CST 2005

first used hijack this and removed these files
Have HJT remove all the following items.

C:\Program Files\SpyAxe\spyaxe.exe
O2 - BHO: C:\WINDOWS\adsldpbd.dll - {826B2228-BC09-49F2-B5F8-42CE26B1B712} -
C:\WINDOWS\adsldpbd.dll
O4 - HKLM\..\Run: [SpyAxe] C:\Program Files\SpyAxe\spyaxe.exe /h
O15 - Trusted Zone: *.coolwebsearch.com
O15 - Trusted Zone: *.searchmeup.com
O20 - Winlogon Notify: gs - C:\WINDOWS\adsldpbd.dll

though you might not necessarily have all of them, next This webstie really
helped
http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

then I downloaded
SmitRemfix
Ewido

After removing the files with hijack, i rebooted in safe mode
used smitremfix (called a DOS batch file called "run this") go throught the
process
then used ewido to do a full system scan and it was gone.

The website gives a little walk through of how to use these 2




"E" wrote:

> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

cyberfyber
Wed Dec 28 22:18:36 CST 2005


E wrote:
> first used hijack this and removed these files
> Have HJT remove all the following items.
>
> C:\Program Files\SpyAxe\spyaxe.exe
> O2 - BHO: C:\WINDOWS\adsldpbd.dll - {826B2228-BC09-49F2-B5F8-42CE26B1B712} -
> C:\WINDOWS\adsldpbd.dll
> O4 - HKLM\..\Run: [SpyAxe] C:\Program Files\SpyAxe\spyaxe.exe /h
> O15 - Trusted Zone: *.coolwebsearch.com
> O15 - Trusted Zone: *.searchmeup.com
> O20 - Winlogon Notify: gs - C:\WINDOWS\adsldpbd.dll
>
> though you might not necessarily have all of them, next This webstie really
> helped
> http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3
>
> then I downloaded
> SmitRemfix
> Ewido
>
> After removing the files with hijack, i rebooted in safe mode
> used smitremfix (called a DOS batch file called "run this") go throught the
> process
> then used ewido to do a full system scan and it was gone.
>
> The website gives a little walk through of how to use these 2
>

Hey there, Thanks so much for this post!

I myself had gotten Acid XMC by Sony yesterday and afterwards went off
downloading free loops here and there ('won't be doing that again!!!).
Because of this I must've gotten that nasty malware.
Anyhow I just spent a good part of the past 24 hours trying again and
again with different Spyware Software and your suggestion finally did
the trick. I'm all smiles now.

Duane
Thu Dec 29 10:47:03 CST 2005



"E" wrote:

> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

Duane
Thu Dec 29 11:05:02 CST 2005

I had something similar happen to me the other day. A warning sign popped up
in the lower rt. corner saying that my computer was infected. It had an X box
to close it and thats when all kinds of things started popping up and
"spyaxe" was installed before I could do anything. I ran everything I had to
get rid of it. McAfee and Beta found nothing. Registry Mechanic found a few
things but Webroot Spy Sweeper finally got rid of it all. The pop up warning
would not stop though. I also noticed all my security settings were changed
to the lowest settings. I reset the settings and restarted the computer from
an earlier date. Everthing is working ok now. I am a computer novice and
don't know if it is still hiding somewhere. Anyone out there have suggestions?

"E" wrote:

> My internet explorer has some kind of program infecting it. My home page
> regardless of what i changed it to has some program which redirects me to
> http://www.systemwarning.com/.
> Also it creates an icon on my start menu which claims my computer is
> infected, and attempts to download spyaxe on my computer.
>
> Tried to remove using microsoft antispyware,mcafee... it removed certain
> files such as search for free and spy axe, but i cant seem to get the
> interenet explorer homepage chaning and the start menu icon, plus the
> reattempt of spyaxe to go away.
>
> anyone know how to get rid of these?

PA
Thu Dec 29 12:27:23 CST 2005

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

Duane wrote:
> I had something similar happen to me the other day. A warning sign popped
> up in the lower rt. corner saying that my computer was infected. It had
> an X box to close it and thats when all kinds of things started popping
> up and "spyaxe" was installed before I could do anything. I ran
> everything I had to get rid of it. McAfee and Beta found nothing.
> Registry Mechanic found a few things but Webroot Spy Sweeper finally got
> rid of it all. The pop up warning would not stop though. I also noticed
> all my security settings were changed to the lowest settings. I reset the
> settings and restarted the computer from an earlier date. Everthing is
> working ok now. I am a computer novice and don't know if it is still
> hiding somewhere. Anyone out there have suggestions?

Wayne
Fri Dec 30 06:27:15 CST 2005

Some sweepers will find spyaxe and quarantine and remove it HOWEVER it sits
in your System32 registry even after it says it was removed.I had the same
scenerio.So it has to be fixed in the registry.
See the below copied infos:

I got hit with Spyaxe and its Trojan cohort 2 days ago.I tried manual and
other removals to no avail.Finally tried this:
http://www.infopackets.com/channels/en/windows/nicks_computer_security/2005/20051220_remove_spyaxe_removal_instructions.htm

It involved a few Demo downloads of Spyware and Malware scanning programs
but it cured my PC with WinXP running.Follow the directions closely.
Been running smoothely and all the System32 registeries are clean now of
Spyaxe foolishness.All needs links to demo programs are included also on
that site.

Hope this helps
WKR

PS- the admin for Spyaxe and its " axis of evil" co-programs has been
bombarded with emails and call since he was found out.Not sure if any legal
actions will be taken against him.His domain name is Spyaxe.com,hosted in
Ukraine but admin is in Seattle,WA.







"Duane" <Duane@discussions.microsoft.com> wrote in message
news:0FF3C4D4-DF05-41D8-BBE3-DEDA3A354ECB@microsoft.com...
>I had something similar happen to me the other day. A warning sign popped
>up
> in the lower rt. corner saying that my computer was infected. It had an X
> box
> to close it and thats when all kinds of things started popping up and
> "spyaxe" was installed before I could do anything. I ran everything I had
> to
> get rid of it. McAfee and Beta found nothing. Registry Mechanic found a
> few
> things but Webroot Spy Sweeper finally got rid of it all. The pop up
> warning
> would not stop though. I also noticed all my security settings were
> changed
> to the lowest settings. I reset the settings and restarted the computer
> from
> an earlier date. Everthing is working ok now. I am a computer novice and
> don't know if it is still hiding somewhere. Anyone out there have
> suggestions?
>
> "E" wrote:
>
>> My internet explorer has some kind of program infecting it. My home page
>> regardless of what i changed it to has some program which redirects me to
>> http://www.systemwarning.com/.
>> Also it creates an icon on my start menu which claims my computer is
>> infected, and attempts to download spyaxe on my computer.
>>
>> Tried to remove using microsoft antispyware,mcafee... it removed certain
>> files such as search for free and spy axe, but i cant seem to get the
>> interenet explorer homepage chaning and the start menu icon, plus the
>> reattempt of spyaxe to go away.
>>
>> anyone know how to get rid of these?

correotaller
Sat Jan 21 20:47:28 CST 2006



Hi,
This site could help you:
http://www40.brinkster.com/spyaxe/spyaxe-info.asp


thanks