From: "demiculo" <shachar.bretstein@gmail.com>

| Hi Gerry, Hi David Lipman
|
| since I was reading a lot of messages from people who managed to remove
| the SpyAxe with the supported tools, I didn't to go on with the manual
| deletion.
| I got to the point where I was desperate/pissed enough to go manual.
| results are great, no residues of the SpyAxe nor the annoying pop up
| balloon.
| Some points that you might find interesting:
| 1. NONE of the files (ioctrl.dll, svchosts.dll etc) existedon my
| computer nor in the registry.
| 2. After removing the traces of SpyAxe from the registry in safe mode
| and rebooting to normal mode the Ewido caught the SpyAxe infection in
| the following dll c:\windows\system32\wbeconm.dll
| 3. I went back to safe mode and went through the process again. while
| doing so, I discovered a file called sa1.exe in the C:\Documents and
| Settings\[user name]\Local Settings\Temp directory which described as
| SpyAxe installer.
| After removing this file as the SpyAxe traces - I'm all clean.
|
| Thanks for your help, and I hope you can benefit something from the
| info I supplied.

I did and my tool has been updated. Thanx !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm