PDA

View Full Version : SpywareStrike 2.5



rrogge
2006-03-06, 09:51
Since a couple of weeks, a tool called SpywareStrike 2.5 is living on my computer. I ran a few times a Norton anti-virus scan without results. I also ran Spybot-S&D after downloading the latest updates. It detects SpywareStrike, but even after reboot with Spybot-S&D scan, SpywareStrike 2.5 is still there.
I posted a thread on the more global Spybot-S&D forum but as asked by tashi I now open a thread on the malware forum.
I sent a copy of the files I find in the /Program Files/SpywareStrike folder to MacSurf a few days ago, but didn't receive any response after that.

Who can help me to get rid off that :mad: damned :mad: SpywareStrike thing ? :confused:
Sorry but I'm not a computer nerd, so please dear helper, don't get to technical. :bigthumb:
Thanks at beforehand. :D

Regards,
rrogge

Below a list of the abnormal things that occur on our computer since SpywareStrike 2.5 made our computer his home :

The message that SpywareStrike keeps on showing down right my screen is :
Your computer is infected!
Dangerous infection was detected on you PC
The system will now download and installl most efficient
antimalware program to prevent data loss and your private
information theft.
Click here to protect your computer from the biggest malware
threats.
When closing the message it reappears a few seconds later.

There is a SpywareStrike directory in the Program Files directory.

Also in the All programs program list, SpywareStrike is present, even with an Uninstall option. When I start the uninstallation, a popup appears asking me the confirmation of the removal of SpywareStrike from the Program Files directory. When I confirm, I do not find SpywareStrike.exe anymore in the processes list of task manager but the infection message keeps on appearing.

After rebooting my computer, everything is back again : the message, the directory, SpywareStrike.exe

At each reboot, a (fake) scan by the SpywareStrike anti-spyware is executed. It terminates after a few seconds with a message indicating how much threats were found. That number of threats seems to increase slowly with the number of reboots.

From time to time, some popup advertisement for a casino or erotic site shows up on our screen. We can simply close it, but it shouldn't appear at all.

The startpages we defined for our internet explorer were removed or replaced by some page we do not want to see.

So that's all folks. Hope this helps you to find out how to remove this :mad: damned :mad: tool from my and others computer.

tashi
2006-03-07, 15:23
Hi there.
I understand from MacSurf that you may be running Spybot-S&D 1.3 rather than version 1.4
http://forums.spybot.info/showthread.php?t=2757

Meanwhile please see here as requested:
Before you post a log, and who will advise you. (http://forums.spybot.info/showthread.php?t=288)

Copypaste the hjt log into this thread.

A helper will then take a look as soon as available to do so.

Cheers.

rrogge
2006-03-08, 21:53
Hye tashi,

Yesterday evening I sent the info requested by MacSurf in the thread you refer to after installing Spybot-S&D version 1.4 and running a scan with it.
I hope with that report he will be able to figure out how to get rid off that :mad: SpywareStrike :mad: malware.
See you.

LonnyRJones
2006-03-10, 12:57
Hi rrogge

Fallow the instructions on this page and post the logs mentioned please.
http://forums.spybot.info/showthread.php?t=1958

rrogge
2006-03-14, 21:34
Hye Spybot team,
Thank you for looking into the information I sent you last week as requested. I installed the specific SpywareStrike includes file I received in response, scanned my computer with Spybot-S&D and the SpywareStrike 2.5 malware was gone !!!! Great !!!! :D
The only trace of the infection that remains is a Virus Alert message that keeps on appearing down right my screen, telling my computer is infected. See the attached file for a copy.
Any idea how to get rid off it ?
Thanks in advance.

tashi
2006-03-17, 15:27
rrogge

Please provide the logs Lonny requested, thank you.

tashi
2006-03-25, 21:51
This topic is closed due to lack of a response to helper.
If you need it re-opened please send me a pm and provide a link to the thread.