21. by Guest. 2006-01-30 18:01:08
Many thanks to post-ers here, especially the tip to use MS-DOS command mode, which allowed me to get rid of the pesky replmap.dll using good ol DOS...
22. by Guest. 2006-01-30 14:01:30
After downloading Norton AntiVirus 2006, it removed the virus (ie all the registery values) but left the anoying popup and the "Security Toolbar" on explorer. I had to boot in safe mode and switch to a different account to remove the mssearchnet.exe files etc. The easiest way was to go C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32 and delete them rather than doing searches.
To remove the toolbar I downloaded Toolbar Cop at http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/Toolbarcop.shtm land that tool care of the rest.
23. by Guest. 2006-01-30 00:01:12
Ok so, i am the 22:01:07 poster, i cleared it up with Smitrem by Noahdfear. i had used it on the original "netwrap.dll" spyware strike, and at first it did not work on replmap.dll
so, trolling around i found that SmitRem has been updated and SHOULD clear this all up.
follow all normal procedures with smitRem, but before starting, delete the old copy of SmitRem (if u have) and get the new copy. then...
move to desktop, open folder, run "runthis.bat"
close all programs and follow prompts. then restart as normal
24. by Guest. 2006-01-29 22:01:07
I tried to type that in the cmd.exe prompt, and my prompt replied "C:\\ is not recognized as an internal or external command, operable program or batch file"
so, i still cannot delete replmap.dll
thus the popup stays, and the spryware strike comes back.
please help!
25. by Guest. 2006-01-29 19:01:25
Wow this was a nasty little bugger. Purchased Spyware Doctor and ran as some postings advised. It removed most of the problems, however whenever monitoring options were not on from boot, the culprit would reload time and time again. Finally through posts here I found the culprit. "replmap.dll" was still locked in the \windows\system32 directory. This then loaded at boot, installed an additional "windows Update Icon" in the Taskbar, that contantly blinked with a "RED X Circle", and beeped every 10 seconds or so. After a time it would then simply redirect and connect to internet blindly and reinstall "SpywareStrike".
After again cleaning system, locking down with Spy..Doc.. stopped annoiances, and restarted in Safe Mode. However this file also loads now at the start up in SAFE MODE!, and therefore is NOT removable through the limited GUI interface. I Finally attained success in removing the cuprit file "replmap.dll" by restarting in "SAFE MODE with MS DOS Prompt" mode. Thank God I am an old enough techie to know DOS commands, they still come in handy.
The steps I used are:
Move to the culprits folder first, mine was in the Windows\system32\ directory.
Verify file location.
Delete file.
Verify removal.
Close MSDOS.
Reboot system.
DOS commands=
C:\ {Enter}
C:\windows\system32 {Enter}
dir repl*.dll {you should have another file that must be left alone show up here (Replace.exe)
del replmap.dll
dir replmap.dll {should yield a nothing result}
exit {Enter}
REBOOT System
I hope this can help someone else.
Allan D
26. by Guest. 2006-01-29 17:01:19
I deleted EVERYTHING it said to even the things in the registry... using Regedit. After I deleted all that crap it came down to replmap file... I got rid of it by using Registry Mechanic. Havent tryed restarting yet to see if it all worked...
*Fingers Crossed*
27. by Guest. 2006-01-28 13:01:46
got infected this morning, still working to resolve, the MS Antispyware beta seemed to help, but I still have the nasty messages in my tray. I am not a technical person, but I attempted to follow some of the other ealier suggestions like deleting the replmap file and the wiatwain.dll file...
when I attempted to delete the replmap file, my computer gave me an "access denied" error and would not let me delete it. I renamed it and still no luck deleting it. How can I delete that file?
Also, when I searched for the wiatwain.dll file, all I turned up were a few variants such as wiatwain.ds, Twain_32.dll, and other similiar variations. Should I delete the wiatwain.ds file or any of the "twain" variants? or are they all something completely different than wiatwain.dll?
28. by Guest. 2006-01-28 11:01:06
I have tried everything recommended on every website available(including this one) that I could find on how to remove Spaware Strike2.5 with absolutely no luck whatsoever! I have even gone so ar as to format my hard drive & even that did not get rid of it. It reasserted itself almost immediately after reloading Windows!! I am supremely pissed!! Is there anything else anybody can offer in the way of help to get rid of this short of going out & building a whole new computer?!
29. by Guest. 2006-01-27 16:01:55
I just got this today and kicked it after 4 hours. The links here helped a lot, thanks to all who posted. I erased everything from the list above as well as running the free scan from Spyware Doctor and manually deleting what turned up.(i;m cheap). seems to have worked. Thanks again to all who posted
30. by Guest. 2006-01-26 16:01:44
BTW, I was reluctant to delete these 2 registry entries as no one had any info on them, but did it anyway and have had no problems- computer and Internet Explorer are running fine.
31. by Guest. 2006-01-26 16:01:54
we got hit with this on 1/24 also. just wanted to let you know, I found additional files not listed on any help I found, that I am convinced should also be removed. In the registry, go to HKLM\software\microsoft\windows\currentversion\policies\explorer\run. I found 2 files here- one was "kernel32.dll = winnt/system32/spywarestrike, and the other mentioned MSSEARCHNET.EXE.
32. by Guest. 2006-01-24 16:01:20
gee, that onyt took two days to get rid of. i had the rep version as well... probably the new strain....pain in the ass is what it was.
33. by Guest. 2006-01-24 14:01:11
I followed this procedure but had no success. Based on the comment after this one, I too had the variant that uses replmap.dll. Deleted the file and it seems to have removed the popup from the system tray.
34. by Guest. 2006-01-24 13:01:32
I followed this procedure but had no success. Based on the comment after this one, I too had the variant that uses replmap.dll. Deleted the file and it seems to have removed the popup from the system tray.
35. by Guest. 2006-01-24 12:01:19
I have found a variant which uses replmap.dll.
36. by Guest. 2006-01-24 08:01:33
i didnt manage to find any of these files not even in the new account or in the safe mode. please help
37. by Guest. 2006-01-24 08:01:34
By Scooter
Had the same problem as others with mssearchnet.exe, nvctrl.exe and the trick of the new user account was of no value.
However, started in safe mode (F8 during start up) and was able to delete the files - no problems.
Try this and let me know how it goes.
38. by Guest. 2006-01-23 22:01:09
HELP i would try to delete all these manually but when i try to kill the processes they keep coming back so could anyone help or know a way to stop them temporaily or permenantly would be better
39. by Guest. 2006-01-23 19:01:32
thanks everyone i remamed the user and it worked like a charm
40. by Guest. 2006-01-23 17:01:48
many thanks to the author of that post. everything appears to be fine now.
6. by Guest. 22/01/2006. 06:01:38
all you have to do to get rid of the virus spywarestrike is open a new user account on your computer log on with that account go to start menu use find and locate wiatwain.dll in c:windows systems32 and delete it if that dosent work rename it and log on again and then delete it the key to doing this is opening a new user account and using that account and that will be the end of your problems
Many thanks to post-ers here, especially the tip to use MS-DOS command mode, which allowed me to get rid of the pesky replmap.dll using good ol DOS...
22. by Guest. 2006-01-30 14:01:30
After downloading Norton AntiVirus 2006, it removed the virus (ie all the registery values) but left the anoying popup and the "Security Toolbar" on explorer. I had to boot in safe mode and switch to a different account to remove the mssearchnet.exe files etc. The easiest way was to go C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32 and delete them rather than doing searches.
To remove the toolbar I downloaded Toolbar Cop at http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/Toolbarcop.shtm land that tool care of the rest.
23. by Guest. 2006-01-30 00:01:12
Ok so, i am the 22:01:07 poster, i cleared it up with Smitrem by Noahdfear. i had used it on the original "netwrap.dll" spyware strike, and at first it did not work on replmap.dll
so, trolling around i found that SmitRem has been updated and SHOULD clear this all up.
follow all normal procedures with smitRem, but before starting, delete the old copy of SmitRem (if u have) and get the new copy. then...
move to desktop, open folder, run "runthis.bat"
close all programs and follow prompts. then restart as normal
24. by Guest. 2006-01-29 22:01:07
I tried to type that in the cmd.exe prompt, and my prompt replied "C:\\ is not recognized as an internal or external command, operable program or batch file"
so, i still cannot delete replmap.dll
thus the popup stays, and the spryware strike comes back.
please help!
25. by Guest. 2006-01-29 19:01:25
Wow this was a nasty little bugger. Purchased Spyware Doctor and ran as some postings advised. It removed most of the problems, however whenever monitoring options were not on from boot, the culprit would reload time and time again. Finally through posts here I found the culprit. "replmap.dll" was still locked in the \windows\system32 directory. This then loaded at boot, installed an additional "windows Update Icon" in the Taskbar, that contantly blinked with a "RED X Circle", and beeped every 10 seconds or so. After a time it would then simply redirect and connect to internet blindly and reinstall "SpywareStrike".
After again cleaning system, locking down with Spy..Doc.. stopped annoiances, and restarted in Safe Mode. However this file also loads now at the start up in SAFE MODE!, and therefore is NOT removable through the limited GUI interface. I Finally attained success in removing the cuprit file "replmap.dll" by restarting in "SAFE MODE with MS DOS Prompt" mode. Thank God I am an old enough techie to know DOS commands, they still come in handy.
The steps I used are:
Move to the culprits folder first, mine was in the Windows\system32\ directory.
Verify file location.
Delete file.
Verify removal.
Close MSDOS.
Reboot system.
DOS commands=
C:\ {Enter}
C:\windows\system32 {Enter}
dir repl*.dll {you should have another file that must be left alone show up here (Replace.exe)
del replmap.dll
dir replmap.dll {should yield a nothing result}
exit {Enter}
REBOOT System
I hope this can help someone else.
Allan D
26. by Guest. 2006-01-29 17:01:19
I deleted EVERYTHING it said to even the things in the registry... using Regedit. After I deleted all that crap it came down to replmap file... I got rid of it by using Registry Mechanic. Havent tryed restarting yet to see if it all worked...
*Fingers Crossed*
27. by Guest. 2006-01-28 13:01:46
got infected this morning, still working to resolve, the MS Antispyware beta seemed to help, but I still have the nasty messages in my tray. I am not a technical person, but I attempted to follow some of the other ealier suggestions like deleting the replmap file and the wiatwain.dll file...
when I attempted to delete the replmap file, my computer gave me an "access denied" error and would not let me delete it. I renamed it and still no luck deleting it. How can I delete that file?
Also, when I searched for the wiatwain.dll file, all I turned up were a few variants such as wiatwain.ds, Twain_32.dll, and other similiar variations. Should I delete the wiatwain.ds file or any of the "twain" variants? or are they all something completely different than wiatwain.dll?
28. by Guest. 2006-01-28 11:01:06
I have tried everything recommended on every website available(including this one) that I could find on how to remove Spaware Strike2.5 with absolutely no luck whatsoever! I have even gone so ar as to format my hard drive & even that did not get rid of it. It reasserted itself almost immediately after reloading Windows!! I am supremely pissed!! Is there anything else anybody can offer in the way of help to get rid of this short of going out & building a whole new computer?!
29. by Guest. 2006-01-27 16:01:55
I just got this today and kicked it after 4 hours. The links here helped a lot, thanks to all who posted. I erased everything from the list above as well as running the free scan from Spyware Doctor and manually deleting what turned up.(i;m cheap). seems to have worked. Thanks again to all who posted
30. by Guest. 2006-01-26 16:01:44
BTW, I was reluctant to delete these 2 registry entries as no one had any info on them, but did it anyway and have had no problems- computer and Internet Explorer are running fine.
31. by Guest. 2006-01-26 16:01:54
we got hit with this on 1/24 also. just wanted to let you know, I found additional files not listed on any help I found, that I am convinced should also be removed. In the registry, go to HKLM\software\microsoft\windows\currentversion\policies\explorer\run. I found 2 files here- one was "kernel32.dll = winnt/system32/spywarestrike, and the other mentioned MSSEARCHNET.EXE.
32. by Guest. 2006-01-24 16:01:20
gee, that onyt took two days to get rid of. i had the rep version as well... probably the new strain....pain in the ass is what it was.
33. by Guest. 2006-01-24 14:01:11
I followed this procedure but had no success. Based on the comment after this one, I too had the variant that uses replmap.dll. Deleted the file and it seems to have removed the popup from the system tray.
34. by Guest. 2006-01-24 13:01:32
I followed this procedure but had no success. Based on the comment after this one, I too had the variant that uses replmap.dll. Deleted the file and it seems to have removed the popup from the system tray.
35. by Guest. 2006-01-24 12:01:19
I have found a variant which uses replmap.dll.
36. by Guest. 2006-01-24 08:01:33
i didnt manage to find any of these files not even in the new account or in the safe mode. please help
37. by Guest. 2006-01-24 08:01:34
By Scooter
Had the same problem as others with mssearchnet.exe, nvctrl.exe and the trick of the new user account was of no value.
However, started in safe mode (F8 during start up) and was able to delete the files - no problems.
Try this and let me know how it goes.
38. by Guest. 2006-01-23 22:01:09
HELP i would try to delete all these manually but when i try to kill the processes they keep coming back so could anyone help or know a way to stop them temporaily or permenantly would be better
39. by Guest. 2006-01-23 19:01:32
thanks everyone i remamed the user and it worked like a charm
40. by Guest. 2006-01-23 17:01:48
many thanks to the author of that post. everything appears to be fine now.
6. by Guest. 22/01/2006. 06:01:38
all you have to do to get rid of the virus spywarestrike is open a new user account on your computer log on with that account go to start menu use find and locate wiatwain.dll in c:windows systems32 and delete it if that dosent work rename it and log on again and then delete it the key to doing this is opening a new user account and using that account and that will be the end of your problems