CEL

iTrader: (1)

Been infected on 2 machines now. Both at home, with some, close to throwing the pc out of the window bullsh!t malware

They used to be easy to get rid of but this one... grrrrrrr

Don't suppose anyone else has this one do they? "spywarestrike" well at least thats part of it. It keeps activating my automatic update and telling me there is a 'dangerous system infection' you should go here and download the bestest ever malware and spyware removal tool. Feckin idiots, as if anyone with any kinda brain is going to fall for that one

I'm fast running out of ideas, the usual spware detectors might find and delete it but definately not permanently! It's like an x girlfriend, it keeps coming back for more!

Anyone got any bright ideas on how to remove this b@stard thing?

The other option is a full reinstall, the laptop is way overdue for that anyway, just can't be arsed to do it at the moment

Your help or thoughts would be greatly appreciated.

Chris

SiDHEaD

If it's not IE integrated, restart in safe mode, and take it out of the "run" parts of registry.

D16GER

Here ya go buddy

But, as always Use At Your Own Risk

Edit - I would tend to favour the manual method, as I don't know what the removal tool is. But it's your call.

BTW apparently those instructions remove the pest, but you are left with an icon in the tray. They are currently trying to sort out complete removal instructions.

CEL

iTrader: (1)

Thanks guys,

Not really surprising there isn't much info on it, seems to be brand new??

Still having problems with it. A few minutes ago i thought i had at least managed to remove the files. But NO, it's managed to install itself again

This one is a complete b!tch !!

If anyone comes up with a permanent solution to the problem could they please post it on here?

Thanks

Chris

The Rani

If your running XP with System Restore there could be another copy of it hiding in there.

Josh_PoloGTi

One of my clients has this infection at the moment...

I spent 5 hours the other night trying to remove it, to no avail. As the OP said, it's like a crazy ex-girlfriend that won't get the message hehehe.

I'm going to go over there now to see if he's got a system restore point set any time recently, and if he has I'll take it back to that point.

It seems that someone wrote a tool to get rid of this, but then they changed the malware so it can't be removed by this tool.

I hope someone comes up with something soon.

It's also known as SpyAxe etc...

Haven't these fools got anything better to do with thier lives

Stueyb

Ive seen a lot of this at work with peoples home pcs that have spyaxe. It can be removed easy enough (did a machine yesterday)

The way I did it was to run through this little page. Really is a doddle and really does work. http://www.bleepingcomputer.com/forums/topic36868.html

CEL

iTrader: (1)

Guys, UPDATE!

Got the b'stard (I think)

If you follow the instructions from the website in D16GER's post firstly.The manual ones not the link (takes you to download spydoctor )

The problem seems to lie with the file netwrap.dll you cant delete it because it is being used by the trojan. Download this programme, find netwrap.dll with the browse function and tell it to delete the file on reboot.

So far everything seems to be ok. Will post again if it re appears

Chris

CEL

iTrader: (1)

Nope, switched that memory consuming piece of crap off ages ago

SiDHEaD

Good news

EP82

I use a combination of:

HiJackThis
Spybot
Micrsoft Antispyware
ewido anti-malware
drweb-cureit

mal/spy/adware is a pain in the **** to remove i have noticed a big drop in problems since moving away from IE

Pumpkin

I had to help father-in-law remove Spyaxe from his PC. Took a while but I found a utility to help. Switched of system restore and ran the killer in safe mode.

Josh_PoloGTi

Thanks Chris

This sorted the problem!!

I'm very appreciative... It saved me from rebuilding his laptop.

Thanks Again...

Josh