David,

You are very knowledgable on this topic, but I was a bit confused by this
post. Is Spyaxe synonymous with PSguard, and if so, does SmitFraud work with
MCE 2005? I seem to have contracted PSguard (detected with ad-aware), and
have found several references to SmitFraud as the solution to my problem, but
despite having run the batch file three times now, it doesn't seem to clear
the problem.

I suspected that perhaps a change in directory structure or file names might
cause the batch file to fail, and I would appreciate your confirmation that
these instructions are applicable to MCE.

Thanks!

BH

"David H. Lipman" wrote:

> From: <jaredwilli@gmail.com>
>
> | I had this same problem and found the cure to the SpyAxe popup
> | activity! I tried SpyBot Search and Destroy and Ad-aware, I have
> | Mcaffee Internet Security Suite and it didn't do anything, and that
> | always catches viruses, and I used various other programs virtually all
> | of the top of the line tools, but nothing fixed the problem.
> | SpyAxe states that they have been getting a lot of complaints about
> | illegal affiliates infecting computers with Trojans forcing people to
> | by their product in order to remove the Trojan that's advertising their
> | product. SpyAxe is a ligament company I guess, but there are some evil
> | affiliates that will do anything to get commission from these
> | legitimate companies, such as SpyAxe, so they create these annoying
> | Trojans like this to force people to buy things, basically holding your
> | computer hostage.
> |
> | SpyAxe has provided a simple fix that removes these types of Trojans
> | for free and believe it or not it really works. Here are the
> | instructions:
> | ------------------
> | In order to clean your PC from infections related to Spyware Axe
> | product, please follow the instructions below:
> |
> | 1) Save the "Uninstallers.zip" program from
> | http://www.spyaxe.com/uninstall/uninstallers.zip to your desktop or
> | HDD. (I was a
> | little hesitant to do this at first, but I did it anyways because I
> | tried everything else and it REALLY did remove the program from
> | my computer, so don't worry this REALLY works. Really!)
> |
> | 2) Extract the file "illegal_adv_uninstall1.exe" to your desktop or
> | your HDD using WinZip.
> |
> | 3) Execute the program by double-clicking with your mouse. Nothing
> | special happens when you run the program (you don't even see it run)
> | and you'll think nothing ran, but just Reboot your PC and you will
> | notice that your PC is now clean.
> |
> | I was just about to re-install XP and then I found this in a forum at
> | sillydog.org, and it really just did work.
>
> Unfortunately that will NOT be enough !
>
> There are various Trojans associated with SpyAxe and assuming that removes SpyAxe, it won't
> remove the infectors that may have ayromatically installed it.
>
> SpyAxe is malware. It is rarely advisable yo use an uninstaller from a vendor who creates
> that malware.
>
> Two part reply..
>
> Perform Part 1 and then perform Part 2.
>
> Use the alternate if the first two parts are ineffective...
> Note: Alternate only for Win2K, WinXP and Win2003 Server
>
> Part 1
> -----------
>
> Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
> http://noahdfear.geekstogo.com/click...click.php?id=1
>
> http://www.bleepingcomputer.com/forums/topic36868.html
>
>
> Part 2
> -----------
>
> Download SmitFraud.exe from the URL --
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before performing another scan.
>
> Alternate:
>
> Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.
>
> http://secured2k.home.comcast.net/tools/AntiPuper.exe
>
> http://forums.mcafeehelp.com/viewtopic.php?t=65072
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>