Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

These malware things are getting worse!

Thread Tools
 
Search this Thread
 
Old Jan 7, 2006 | 12:00 AM
  #1  
CEL's Avatar
CEL
Thread Starter
Scooby Regular
iTrader: (1)
 
Joined: Mar 2003
Posts: 3,228
Likes: 0
From: Sheffield
Default These malware things are getting worse!

Been infected on 2 machines now. Both at home, with some, close to throwing the pc out of the window bullsh!t malware

They used to be easy to get rid of but this one... grrrrrrr

Don't suppose anyone else has this one do they? "spywarestrike" well at least thats part of it. It keeps activating my automatic update and telling me there is a 'dangerous system infection' you should go here and download the bestest ever malware and spyware removal tool. Feckin idiots, as if anyone with any kinda brain is going to fall for that one

I'm fast running out of ideas, the usual spware detectors might find and delete it but definately not permanently! It's like an x girlfriend, it keeps coming back for more!

Anyone got any bright ideas on how to remove this b@stard thing?

The other option is a full reinstall, the laptop is way overdue for that anyway, just can't be arsed to do it at the moment

Your help or thoughts would be greatly appreciated.

Chris
Reply
Old Jan 7, 2006 | 01:46 AM
  #2  
SiDHEaD's Avatar
SiDHEaD
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Default

If it's not IE integrated, restart in safe mode, and take it out of the "run" parts of registry.
Reply
Old Jan 7, 2006 | 02:03 AM
  #3  
D16GER's Avatar
D16GER
Scooby Regular
 
Joined: Sep 2005
Posts: 924
Likes: 0
Default

Here ya go buddy

But, as always Use At Your Own Risk

Edit - I would tend to favour the manual method, as I don't know what the removal tool is. But it's your call.

BTW apparently those instructions remove the pest, but you are left with an icon in the tray. They are currently trying to sort out complete removal instructions.

Last edited by D16GER; Jan 7, 2006 at 02:19 AM.
Reply
Old Jan 7, 2006 | 11:17 AM
  #4  
CEL's Avatar
CEL
Thread Starter
Scooby Regular
iTrader: (1)
 
Joined: Mar 2003
Posts: 3,228
Likes: 0
From: Sheffield
Default

Thanks guys,

Not really surprising there isn't much info on it, seems to be brand new??

Still having problems with it. A few minutes ago i thought i had at least managed to remove the files. But NO, it's managed to install itself again

This one is a complete b!tch !!

If anyone comes up with a permanent solution to the problem could they please post it on here?

Thanks

Chris
Reply
Old Jan 7, 2006 | 11:25 AM
  #5  
The Rani's Avatar
The Rani
Scooby Regular
 
Joined: Mar 2005
Posts: 3,174
Likes: 0
From: Here .....
Default

If your running XP with System Restore there could be another copy of it hiding in there.
Reply
Old Jan 7, 2006 | 11:34 AM
  #6  
Josh_PoloGTi's Avatar
Josh_PoloGTi
Scooby Newbie
 
Joined: Sep 2004
Posts: 26
Likes: 0
From: Nr. Sheffield, UK
Default

One of my clients has this infection at the moment...

I spent 5 hours the other night trying to remove it, to no avail. As the OP said, it's like a crazy ex-girlfriend that won't get the message hehehe.

I'm going to go over there now to see if he's got a system restore point set any time recently, and if he has I'll take it back to that point.

It seems that someone wrote a tool to get rid of this, but then they changed the malware so it can't be removed by this tool.

I hope someone comes up with something soon.

It's also known as SpyAxe etc...

Haven't these fools got anything better to do with thier lives
Reply
Old Jan 7, 2006 | 11:47 AM
  #7  
Stueyb's Avatar
Stueyb
Scooby Regular
 
Joined: May 2002
Posts: 1,893
Likes: 0
Default

Ive seen a lot of this at work with peoples home pcs that have spyaxe. It can be removed easy enough (did a machine yesterday)

The way I did it was to run through this little page. Really is a doddle and really does work. http://www.bleepingcomputer.com/forums/topic36868.html
Reply
Old Jan 7, 2006 | 11:59 AM
  #8  
CEL's Avatar
CEL
Thread Starter
Scooby Regular
iTrader: (1)
 
Joined: Mar 2003
Posts: 3,228
Likes: 0
From: Sheffield
Default

Guys, UPDATE!

Got the b'stard (I think)

If you follow the instructions from the website in D16GER's post firstly.The manual ones not the link (takes you to download spydoctor )

The problem seems to lie with the file netwrap.dll you cant delete it because it is being used by the trojan. Download this programme, find netwrap.dll with the browse function and tell it to delete the file on reboot.

So far everything seems to be ok. Will post again if it re appears

Chris
Reply
Old Jan 7, 2006 | 12:03 PM
  #9  
CEL's Avatar
CEL
Thread Starter
Scooby Regular
iTrader: (1)
 
Joined: Mar 2003
Posts: 3,228
Likes: 0
From: Sheffield
Default

Originally Posted by The Rani
If your running XP with System Restore there could be another copy of it hiding in there.

Nope, switched that memory consuming piece of crap off ages ago
Reply
Old Jan 7, 2006 | 12:41 PM
  #10  
SiDHEaD's Avatar
SiDHEaD
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Default

Originally Posted by CEL
Guys, UPDATE!

Got the b'stard (I think)

If you follow the instructions from the website in D16GER's post firstly.The manual ones not the link (takes you to download spydoctor )

The problem seems to lie with the file netwrap.dll you cant delete it because it is being used by the trojan. Download this programme, find netwrap.dll with the browse function and tell it to delete the file on reboot.

So far everything seems to be ok. Will post again if it re appears

Chris
Good news
Reply
Old Jan 7, 2006 | 03:46 PM
  #11  
EP82's Avatar
EP82
Scooby Regular
 
Joined: Feb 2005
Posts: 333
Likes: 0
Default

I use a combination of:

HiJackThis
Spybot
Micrsoft Antispyware
ewido anti-malware
drweb-cureit

mal/spy/adware is a pain in the **** to remove i have noticed a big drop in problems since moving away from IE
Reply
Old Jan 7, 2006 | 04:10 PM
  #12  
Pumpkin's Avatar
Pumpkin
Scooby Senior
 
Joined: Mar 1999
Posts: 1,835
Likes: 0
From: Norwich
Default

I had to help father-in-law remove Spyaxe from his PC. Took a while but I found a utility to help. Switched of system restore and ran the killer in safe mode.
Reply
Old Jan 8, 2006 | 10:12 PM
  #13  
Josh_PoloGTi's Avatar
Josh_PoloGTi
Scooby Newbie
 
Joined: Sep 2004
Posts: 26
Likes: 0
From: Nr. Sheffield, UK
Default

Originally Posted by CEL
The problem seems to lie with the file netwrap.dll you cant delete it because it is being used by the trojan. Download this programme, find netwrap.dll with the browse function and tell it to delete the file on reboot.

So far everything seems to be ok. Will post again if it re appears

Chris
Thanks Chris

This sorted the problem!!

I'm very appreciative... It saved me from rebuilding his laptop.

Thanks Again...

Josh
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
SilverM3
ScoobyNet General
8
Feb 24, 2021 01:03 PM
slimwiltaz
General Technical
20
Oct 9, 2015 07:40 PM
JackClark
Computer & Technology Related
3
Sep 30, 2015 08:29 PM
Phil3822
General Technical
0
Sep 30, 2015 06:29 PM
Benrowe727
ScoobyNet General
7
Sep 28, 2015 07:05 AM




All times are GMT +1. The time now is 11:13 AM.