2fast4hjo skrev:
Någon som kan hjälpa mig att bli av med detta viruset..
Helst råd/ tips via msn....
Q7. How can I manually remove SpyAxe spyware from my computer?
SpyAxe removal:
1. (Re)Start your computer in safe mode:
* Press the F8 key while the system is booting and select "safe mode" (or the safe mode option you want) from the menu that appears.
2. Set Windows to show extensions for known file types:
* Right-click Windows Start and choose ‘Explore’.
* On the menu bar click ‘Tools’ and then ‘Folder Options’ to open the dialog.
* On the ‘View’ tab, scroll down the list of ‘Advanced setting’ and unmark ‘Hide extensions for known file types’.
* Click OK to apply the settings.
3. Rename the spyware files:
* Rename c:\windows\system32\mscornet.exe, for example to: mscornet.exe1.
* Rename c:\windows\system32\mssearchnet.exe, for example to: mssearchnet.exe1.
* Rename c:\windows\system32\nvctrl.exe, for example to: nvctrl.exe1.
* Rename c:\windows\system32\svchosts.dll, for example to: scvhosts.dll1.
Important! Make sure you are renaming the file with extension. DLL’ and not ‘.EXE’. The ‘svchost.exe’ file is a Windows file and should not be touched.
* Rename c:\windows\system32\1024\id9460.tmp (if it exists in that directory), for example to: id9560.tmp1.
4. Disable the HBO Homepage:
* Open Internet Explorer.
* On the menu bar click ‘Tools’ and then ‘Internet Options’ to open the dialog.
* On the ‘Programs’ tab, click the Manage Add-ons button to open the dialog.
* Click on ‘Homepage HBO’ on the list, and tick Disable.
* Click ‘OK’ to apply the settings.
* Click ‘OK’ to close the window.
5. Restart your computer. The spyware warning in the system tray should no longer appear.
Removal Tool
1. Download f-spyaxe.zip (last updated on March 27th, 2006)
www.f-secure.com/tools/f-spyaxe.zip
2. Unzip f-spyaxe.zip to the desktop. The unzipped file will be named f-spyaxe.reg.
3. Reboot the computer into safe mode by pressing "F8" at boot up. See
www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx
for detailed instructions.
4. Double click f-spyaxe.reg and click yes to merge the information into the registry.
5. Reboot the machine.
If there still is problem then please look for these files on your system:
* %WINDIR%\System32\dfrgsrv.exe
* %WINDIR%\System32\hpXXXX.tmp
* %WINDIR%\System32\ldXXXX.tmp
* %WINDIR%\System32\mscornet.exe
* %WINDIR%\System32\mssearchnet.exe
* %WINDIR%\System32\nvctrl.exe
* %WINDIR%\System32\stickrep.dll
%WINDIR% represents the Windows installation directory on your computer.
Submit any files found to us with the web form at:
http://support.f-secure.com/enu/home/virusproblem/sample/index_sample.shtml
(Adding the detail 'Date Created' to Windows Explorer in the detailed view and sorting by it can show quite exactly which new files have been added to system32 folder.)