Spywarestrike/Smitfraud-C/PS-Guard

[hei]

Some days ago I was "attacked" by some Spywarestrike anti-spyware program (loooked like it) and installed some icon on my desktop and a annoying bubble and icon at the task bar. The whole thing was quite irritating. I belive this happend when I, by mistake, downloaded a codeks in order to whatch a video.
I've tried to remove this by using Spy Search and destroy, Ad-aware, Ewido etc, without any success. Well that is - I've managed to get rid of the bubble at the task bar, and the beeping sound every 10 seconds.
I launched the programs in safe mode. I'm not certain that everything is OK. When running an online scan of Kaspersky I get a message that my PC is infected. The Spy Bot search and destroy are not able to remove "Smitfraud-C". Anyone who knows waht I should do?
I even bought and installed the Spyware Doctor program in order to get rid of this, but it didn't help much.
I've got Norton Internet security/anti virus running.

All suggestion highly appreciated.

[ugnius]

here are spywarestrike removal instructions: http://www.2-spyware.com/remove-spywarestrike.html
netwrap.dll file is responsible for blinking icon.

Also try to update Spyware Doctor with 'smart update' button. This program removes Spywarestrike. Unless it is a new mutation.

[hei]

I ran the Spyware doctor but it didn't help. However I tried using Killbox, Ewido which seems to have had a good effect...so far.
Thanks for helping me, I appreciate it.

[hei]

I ran the Spyware doctor but it didn't help. However I tried using Killbox, Ewido which seems to have had a good effect...so far.
Thanks for helping me, I appreciate it.

[qkumbr]

In what directory is netwrap.dll located? I'm having the same problem.

[GTO]

From SpywareStrike manual removal instructions:

Exact file location:
mssearchnet.exe, nvctrl.exe, netwrap.dll, wiatwain.dll, hp[X].tmp - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

If Windows is installed into a different directory on your computer, please provide its name. The netwrap.dll file should be located in [Hard_Drive]\[Windows_Installation_Fodler]\System32.

[horizonunl]

Just to let you know...

When removing this Spyware Strike, you will need to remove it from the Prefetch folder in the
C:\WINDOWS\SYSTEM32 folder. As well has turn your system restore off, and do all this in
SAFE mode as well.

Just thought you would like to know!

I do this for a living so I should know... :wink:

[mrlewp]

Attempting the manual removal , but found NONE of listed files - registry , win/system32 / task manager....nothing to be found ?? I had run the uninstall that this pest program provided , but certainly I should have found the registry entries still present. Any prog. I've ever uninstalled left all registry data , another annoyance.
So, do I go with the 2 apps listed, which I cant even recall now...but one had the word kill in it, and the other was Ewido , I think?
On this very website, Spyware Doctor was offered as an "automatic" removal of SpywareStrike !!
Yeah , right !  It wont touch it, so now I have just another spyware app that cant fix the problem.
Spybot claims it will fix on reboot...but hangs , and gives up --- actually repeats the message to fix on reboot , but never does!!
No, cant find SpywareStrike.exe either......anywhere.
What to do ??

[Packratt]

I'm having the same problem spyware striker 2.5 . the ballons are driving me nuts I'm just starting to try to remove them three antispywares and a firewall and their still here going to try removing them from safe mode hope to post successful removal soon I found these post helpful thanks

   I GOT IT !  After downloading trend micro, giant, spybot and spyware doctor I still had to go into safe mode and manually remove the compnents for spyware striker 2.5 because non of these progams were able to remove it. Don't get me wrong these programs did what they were designed to do they found many problems and resolved them but not the one I was having probelms with.  The removal instructions on this site were invalueble and I couldn't have acomplished the removal without them.  Anyone who is not fimiliar with using commands at the comand prompt should go to the help and support in the start menu and read up on them it had been a while since I have had to use dos commands but it's like riding a bike you never foget how. So after I got rid of it I got back to surfing and striker tried to sneak back in but this time giant and prevx(firewall) caught it be fore it could hijack my browser I wonder if it is using my ip address to attack my browser or if it was a random attack.  Anyone who is unfortunate enough to encouter this hijacker will find the posts and help on this site their savior. Good luck to all!  

[GTO]

mrlewp, if you are experiencing difficulties removing SpywareStrike, just download the HijackThis program and run a scan. Then create a topic in the HijackThis log analysis section and post your log here. I will help you to get rid of the infection.

[MonkeyInTheMeadow]

I used ewido and it found mssearchnet.exe & nvctrl.exe or something similiar to those names and it couldn't remove it for some reason i assumed it was because the processes of them were running and i tried to stop the processes but they keep opening again.. Can anyone help?

[GTO]

MonkeyInTheMeadow,

Please download the KillBox utility and restart your system into Safe Mode. Then delete the files using KillBox. You should not receive any error message.