SpywareStrike - anyone encounter this before?

[Mytherh]

Hi i"m new to this forum, but I've been trying to get rid of this SpywareStrike program which has been popping up on my computer for a while now.  I've tried all the tricks mentioned in the other posts ie. booting to safe mode, running Hijack! this, deleting all the files in the windows/prefetch folder, running Ewido with the latest downloads, Cleanup! and manually deleting the offending .exe files from the windows/system32 folder.  However, I still get a "system Instrusion Detected! popup from the Windows security update icon from the icon bar which tends to stick out like a sore thumb and it continually tries to put SpywareStrike back on my computer.
I'd really appreciate any help that anyone might be willing to give.


Thanks in advance.
- Mytherh.

whoops.. I'm not meant to post log files of Hijack here am i?  I'll move my post to Hijack log analysis for anyone's who's interested in helping ... sorry.

[soygirl]

I'm having the same problem with SpywareStrike.  I just posted my HijackThis log and will let you know if I find a solution.  It's driving me crazy!

[soygirl]

I just downloaded and ran Microsoft AntiSpyBeta 1.  I rebooted my machine and now although I still have the blinking red x in the taskbar, I'm not getting the "system intrusion" pop-up and SpywareStrike hasn't opened.  It's still on my system and has to be fixed but it is less annoying at least.

[GTO]

Hello! Welcome to 2-Spyware.com forums!

SpywareStrike is a completely new parasite. Currently, there is no detailed information about it available. In  next few days this parasite will be analyzed and detailed manual removal steps will be posted at 2-Spyware.com. Today you can try out the latest, but not complete SpywareStrike removal instructions.

[AK0tA]

I have tried the removal link you posted and performed many other istructions from other sites. So far it appears to be gone accept for the tray icon. I hope a repair build comes out soon!

[rexxz]

I got this aswell, and tried the steps mentioned. However like many others I still get the icon and popup, and it still tries to install the software :/

[Donaldinho]

Not had any trouble of any kind for ages, but this is impossible to shift.
Fingers crossed for a cure!

[nichs10]

This one really is doing my head in. I've tried the manual steps in safe mode to delete all the files and no good - its still there.......

And its still generating pop-ups and trying to download the spywarestrike software too.....

help!

[chest_master]

Hello, I’m also new, and have the same exact problem with SpywareStrike. I've never been so frustrated removing a malware/spyware/adware (?) before; I've been at this for a good part of the day. If I had found a variant program it would be update, scan, and remove...

I knew there were people in the same situation, but I just couldn't fine anyone...until goggle sidebar advertisement lead me here.

[adrianfox66]

I followed the instructions here http://www.sysinternals.com/Forum/forum_posts.asp?TID=3357&PN=1 which got rid of the tooltray icon for me.

[ledzppln99]

Hi everyone, I have also recently become the target of spywarestrike and all of the other nasty things that come along with it.  The following gets rid of the balloon popup but still too soon to tell about everything else.

First, run a search and locate "netwrap.dll" which should be in your Windows/System32 folder - this is the bug that keeps the annoying balloon popping up in your toolbar.  Use Killbox (free download) to delete this file.  For me, this had the immediate effect of making that balloon dissapear.

[hoticehunter]

I have this too, but there are some other odd things happening. At first, my homepage would be hijacked, although the homepage didn't show as being changed under the tools, internet options thing. I was able to stop that by disabling an add-on. Also, I'm getting 2 system tray popups, not just the one that other people have been getting.

I have been getting the System Intrusion Detected! popup, but I also started getting a System Alert: Spyware Detected popup a while after the first one.

I've been trying to follow the manual steps for deleting SpywareStrike, but I've been having problems doing so. When I try to kill the processes, the spywarestrike.exe process will go away, but the mssearchnet.exe and nvctrl.exe processes keep coming back no matter how many times I try to end the process or process tree. I also can't delete the mssearchnet and nvctrl files, windows claims that they are being used by another person or program.


edit: I followed the link that adrian gave and that fixed it, at least it stopped the tray icons and popups so far.

[AK0tA]

/\/E\/\/T.. finally.
 I did the complete instruction set for spyaxe and then for spywarestrike and that seemed to get rid of the program but that nasty pop-up still showed up. netwrap.dll is the pop-up culprit. I tried to remove this in safemode and got the error access denied..blah blah so I used kill box a free dlaod, located file c:\\windows\\system32\\netwrap.dll and killed it. worked like a charm. thanks again use killbox to kill the other dll files recomended that tell you access denied.

[Mytherh]

I have been able to get rid of everything bar the irritating taskbar icon + popup.  I'll have to try the killbox! on the netwrap.dll file.  Thanks for your suggestions and interest!  

- Mytherh

[Bionic Antboy]

Hello! Welcome to 2-Spyware.com forums!

SpywareStrike is a completely new parasite. Currently, there is no detailed information about it available. In  next few days this parasite will be analyzed and detailed manual removal steps will be posted at 2-Spyware.com. Today you can try out the latest, but not complete SpywareStrike removal instructions.

I'm new here, but thought I'd share...

I THINK I have slain the beast on a friend's laptop using the above link.

Just as a note, keep a lookout for variations on the RegistryKeys...

I found the following...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curre\ntVersion\Explorer\Browser Helper Objects{27150F81-0877-42E9-AF13-55E5A3439A26}