My windows is infected with spyware = ( an hour 2 sort it out

MercilessKiller

hmmm... if you google the names of the viruses there are ways of removing htem without formatting... depends on how much trouble you'd be in to reinstall windows :P

pottersfolly

teenage_Drama wrote:

hi


i have downloaded plenty of songs from limewire...maybe thats how the spyware got there????

please help

thats where I picked up my bugs from - needless to say I dont use it anymore.

electron_3

Just remember its not limewire thats at fault its the crap that you download
via limewire, if you ever download a file once its downloaded go to where its is
then right click the file then Scan with your Antivirus before opening or playing.

pchelpman

teenage_Drama > Did you ever try the fix recommended by gunneradt? He is right ... ever since post #1 it's clear you have been infected with one of the smitfraud varients, SpyAxe.

What happended when you ran that noahdfear fix?

You do not need to reformat at this stage.

I see you have tried Trend Micro's antispyware scanner. It has shortcomings in my view.

Try their other scanner "Housecall" here .....

http://housecall.trendmicro.com/

Do NOT run the CWShreder tool also offered at that site as yet. (There are doubts as to its effectiveness on a system that is not infected with that particular malware.)

You should also run Panda Activescan here ....

http://www.pandasoftware.com/products/activescan?NRMODE=Published&NRORIGINALURL=%2factivescan%2f&NRNODEGUID=%7b3B202047-35D4-4DA2-B310-B1DBEC2971F2%7d&NRCACHEHINT=Guest

(hit the "Scan your PC" in the centre of the page).

If either scan finds something it can't (or won't) fix then post the results of the scans here for futher advice.

Have you managed to run HijackThis yet? This is the ideal tool to see what malware may be running on your computer. Please try again to scan your computer with it. If sucessful please post the final Notepad logfile report to this thread.

If you still can't run HJT let us know what happens when you try.

opportunity_cost

teenage_Drama wrote:

: ( will have to re-install windows because i just found many viruses. so on the fone to dell as i dont have any xp discs

That's not a good enough reason to re-install windows or format your PC, which is probably what you mean 'cos reinstalling windows alone won't get rid of any virus.

To get rid of the viruses, do the following:

1.Disable System Restore first.

How to Disable System Restore in Windows ME or Windows XP

2. Next you will need to boot into Safe Mode.

How to start Windows in Safe Mode

3. Run a full virus scan with avast

4. Run a full trojan scan with ewido

5. Reboot back to normal mode and re-enable System Restore.

Note: Safe Mode is needed in order to prevent the virus/trojan/worm from running in memory, which makes it impossible to remove in normal mode.

Browntoa

can we leave Pchelpman to sort this problem out please!!!

no-one else spotted the Spyaxe infection and there are specific instructions for it's removal

the standard removal software will not deal with this infection

Chippy_Minton

There are some SpyAxe removal instructions in reply 7 in this thread.

Note that the zip file download mentioned in step 1 should be cmer_uninstallers.zip (SpyAxe must have updated the uninstaller since that post was made). If you go to http://www.spyaxe.com/uninstall/ you'll see the zip filename listed; just click on it to download it. Also, the files in the zip have slightly different names to those given in step 2, but the basic instructions are still valid.

Obviously, you should be careful running any files you download from the internet, but these 2 particular exes are from the web site of SpyAxe themselves so should be safe. Even so, run a virus scan on them before you run them just in case.

Browntoa

the uninstaller from the site that installed the software in the first place !!!

I would leave it to Pchelpman as stated before....

proper instructions for removal are here

http://www.bleepingcomputer.com/forums/topic36868.html

but you need to be sure that you are not dealing with a new variant, hence the guidance is required from Pchelpman