Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spywarestrike virus


  • Please log in to reply
3 replies to this topic

#1 puff the dragon

puff the dragon

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:29 AM

Posted 12 January 2006 - 01:20 PM

Hi! This is my first post to this computer forum. My computer has picked up the spywarestrike virus or whatever you call it. I am looking for information on how to manually remove it. Can anyone help? My name is Vel

BC AdBot (Login to Remove)

 


#2 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:11:29 AM

Posted 12 January 2006 - 05:04 PM

Hi There :thumbsup:

I have read your post and i think it would be wise for you to post a HijackThis log for an expert to review. I bet you are wondering what HijackThis is. Well it's a program that is simply able to show others what's going on inside your computer, in terms of infection etc..

I recommend you follow the HijackThis preparation guide which can be found here. It is important that you follow the guide closely. A number of scans will be run which may well fix your problem.

As the guide says, after you have completed the scans that are recommended, please post your "HijackThis" log in a new topic in the forum found here. Please add your system infomation and also what problems you are having. Please wait for a few days and one of our experts will get onto fixing your computer for you.

Please be aware that this new year we have been swamped so it may take a week for a reply.

David

#3 puff the dragon

puff the dragon
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:29 AM

Posted 12 January 2006 - 07:36 PM

HI Dave

Thanks for your reply and information. Unfortunately, the problem is on my laptop computer and not this computer, (our family desktop computer). My laptop uses a WiFi 802.11 modem. When it encountered the spywarestrike intrusion software, I tried to remove it without adequate information, and ended up disabling my Wifi modem. I tried re-installing it but it wouldn't take.

That is why I was asking for help with a manual version of the Spywarestrike removal process. I did find some information on manual removal at: http://www.2-spyware.com/remove-spywarestr...CFTPjIgodFkfACw

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareStrike
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27150F81-0877-42E9-AF13-55E5A3439A26}
HKEY_CLASSES_ROOT\AppID\spywarestrike.exe
HKEY_CLASSES_ROOT\Interface\{2C15CDEA-3EF4-4405-90B0-19A1389B36ED}
HKEY_CLASSES_ROOT\Interface\{3115A433-3FA0-483B-AB01-2A61C951FE58}
HKEY_CLASSES_ROOT\Interface\{51FEFA9C-1D5A-41C4-81FE-8C0FBE9254F0}
HKEY_CLASSES_ROOT\Interface\{5CCC8D01-9F75-4F07-9ACF-DEB314176C79}
HKEY_CLASSES_ROOT\Interface\{5E7BF614-960B-4A1F-9236-9EC01AC4C5E2}
HKEY_CLASSES_ROOT\Interface\{66F0AC1C-DED5-4965-9E31-39788DF1B264}
HKEY_CLASSES_ROOT\Interface\{849E056A-D67A-431E-9370-2275F26D39B5}
HKEY_CLASSES_ROOT\Interface\{8B7AFBFD-631C-45BA-9145-F059EB58DD73}
HKEY_CLASSES_ROOT\Interface\{AFEB8519-0B8B-4023-8C15-FFB17D5225F9}
HKEY_CLASSES_ROOT\Interface\{BA9CC151-4581-438E-94AF-4C703201B7CA}
HKEY_CLASSES_ROOT\Interface\{BC74C336-FF2C-40C9-AD4E-3772C208406B}
HKEY_CLASSES_ROOT\Interface\{BDF00F24-A571-4392-95EC-04FDFF82A82C}
HKEY_CLASSES_ROOT\Interface\{C4E953E6-770E-4F59-A5E3-43E9F0D682E2}
HKEY_CLASSES_ROOT\Interface\{E0105E7C-D0C4-4DEA-AA21-B02F2960ECAF}
HKEY_CLASSES_ROOT\Interface\{ED39CB7C-1BF6-429B-A275-F183B4A3EFCB}
HKEY_CLASSES_ROOT\Interface\{F23AA637-31D5-4526-B5C6-9FF89E16202C}
HKEY_CLASSES_ROOT\TypeLib\{C1A4C0C9-DBD0-493A-93F8-0B05EDC96224}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{70F17C8C-1744-41B6-9D07-575DB448DCC5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\spywarestrike.exe
HKEY_LOCAL_MACHINE\SOFTWARE\SpywareStrike
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{0A4AF3E9A644EE5C8}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{IA4AF3E9A644EE5C8}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses\{K7C0DB872A3F777C0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpywareStrike



The very first line of code did not exist on my laptop

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareStrike

I was able to find the rest of the codes and remove them.

I still have a problem with the Icons showing up on the task manager tool bar. Even though my register seems to be clear the icon still pops up a warning window and asks me to follow some download instructions on a window that becomes displayed. I can't seem to get rid of them, any ideas?

I am still in the process of trying to repairing my laptop, and re-install the WiFi card.

I appreciate your help


Thanks Vel

#4 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:11:29 AM

Posted 13 January 2006 - 11:24 AM

Hi Vel
The only real way that i know to remove spywarestrike is through a tool produced by a fellow member. I still believe you should follow the instructions in my first post. An expert will step by step help you to remove it, and give you info regarding your other problems.
David :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users