Rogue/Suspect Anti-Spyware Products & Web Sites
SpyAxe & SpySheriff, SpywareStrike (Remover)
- German Version -The SpyAxe & the SpySheriff fit not only in color well to each other, nevertheless, they also invite both cordially unsuspecting users to the Free Scan and the Download. Now they also stand combined with each other on the Red List of all those programs which simulate that they want to help users to clean up their systems of putatively Spyware.
They appear apparently from the Nothing. Suddenly they are there, on the desktop. Whether as a small Icone beside the clock, a quick linking or as a Wallpaper substitute, they become apparent and try to lure the user to their Websites to find there the suitable program for the cleaning of a system.
Where do they come from?
Spyaxe specifies it on her homepage:
* Hidden additions to legitimate programs you install
* False ActiveX certificates used by criminals
* Server-side scripts and vulnerabilities in Operational Systems
* Adult-related web sites
* Freeware and Shareware products
* Email attachments sent to your email address
* Chat rooms where you can exchange files
* File-sharing programs like KaZaa, eDonkey and other
Behavioral research of modern market economy or earning money to loads of all those user who try credulous or desperately to clean up their systems, with products which do not hold what they promise.
These Fake-Programs are installed with Zlob, a trojan downloader. Variants of Zlob silently download and install various third-party spyware and malware scanners to infected computers: Spy Trooper, SpyAxe, Security Toolbar and so on (f-secure.com).
What do they cause?
They hijack desktops, interfere with PopUps which do not disappear from the screen, slow down the speed of the computer, hijack the browser to faked Webpages ect.
How do they get this?
One takes them onto his own system, of as a Trojan no one knows nothing about, of as an additional Adware about which one knows nothing too.
SpyAxe and SpySheriff belong to the big family Smitfraud.
They and their relatives, PSGuard, WorldAntiSpy, RazeSpyware and more, like to change the user's desktop on a way that one becomes attent to them.
Once concerned on a system, they begin to work.
They install themselves with different processes, Dlls (Dynamic link Library) and Registry entries, grave themselves into the Windows System Directory, provide new folders, lead to Websites, allow to download code. For the fact they provide that the calculators are contaminated. They install themselves unknown to the knowledge of the user and, you are not able to uninstall these programs.
Now the SpySheriff has got an unistaller, only what happens if one applies it? On the part of SpyAxe one gets the offer to download two uninstall-files whose names sound very strange. One is supposed to uninstall this new Fake AntiSpyware tool with illegal files. As these both files are brought to run, they work in the background of the machine.
There should be user who could solve the visible problems in this manner, but which information do these uninstall-programs transmit to their manufacturers, running invisibly in the background of the calculaters? Take care, since this URL is handed from one famous forum to the other one. However, one searches them in vain on the homepage of SpyAxe.
There is no visible, readable declaration of SpyAxe to these incidents, on their own homepage. She present as an enterprise in the fight against Spyware. A blue-white deception to the good devoutness.
How to get rid of these Spyware Programs?
This question holds user, assistants and experts some time in breath. Thorough observation of the systems, returning files on different calculators with similar symptoms and one will be able to recognize and to bring a jigsaw puzzle slowly back to a Spyware Program. One recognizes what belongs together, and with empiric experience, one can clean up the system. A protracted, laborious work which takes up many hours.
Standard Cleansing Instructions for Spyware Infections on HijackThis.eu:(Solutions)
- Spyware Infection -> Win XP
- Spyware Infection -> Win 2000
- Spyware Infection -> Win ME
- Spyware Infection -> Win 98SE
If you need to get rid of one of these fake tools which compromise the safety of your system we advise you to clean up your machine with one of the three removers which are actually offered to users all over the world:
S!Ri's
SmitFraudFix
ChangeLog
Noahdfear's
smitRem.exe
Filelist
Malwarebytes'
RogueRemover
Database
We Thank You All in the Name of our Users.
Re: SpyAxe|SpySheriff|SpywareStrike|AlfaCleaner|SpyFal con|Smitfraud (Removal)
