Cannot remove SpyStrike homepage hijacker

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello,

My homepage is hijacked by SpyStrike with address www.uptodatesecurity.com.
I've used MS AntiSpyware, Lavasoft, Spybot and you name it. The program will
not allow itself to be removed and re-installs itself. This is a sin and I
cannot wait until this world catches up with these sinful devils and locks
them up.

Any help to remove this thing? It even blocks the AntiSpyware System
Checkpoints trouble reporter to Microsoft.

Thanks!

Ray
 
I don't know if this will work but it probably is worth a try. Use system
restore to a time prior to the hijack. Also in safe mode try running Ewido
and PcCillin2006.
Please let the group know the results.
Ira
: Hello,
:
: My homepage is hijacked by SpyStrike with address
www.uptodatesecurity.com.
: I've used MS AntiSpyware, Lavasoft, Spybot and you name it. The program
will
: not allow itself to be removed and re-installs itself. This is a sin and
I
: cannot wait until this world catches up with these sinful devils and locks
: them up.
:
: Any help to remove this thing? It even blocks the AntiSpyware System
: Checkpoints trouble reporter to Microsoft.
:
: Thanks!
:
: Ray
 
Its another SpyAxe clone, Use Smitrem and Ewido to clean the system then
finally Ccleaner to remove temp files:

Download SmitRem

http://noahdfear.geekstogo.com/click counter/click.php?id=1

Save it to your desktop,Double click Smitrem.exe to extract it to it's own
folder on the desktop.

Please download, install, and update the trial version of ewido security
suite

http://www.ewido.net/en/download/

When installing, under "Additional Options" uncheck "Install background
guard" and "Install scan via context menu". Click on update in the left menu,
then click the Start update button. After the update finishes close Ewido

Download Ccleaner

http://www.ccleaner.com/ccdownload.asp

Install then close.

Now reboot to Safe Mode - Restart your computer and immediately begin
tapping the F8 key on your keyboard.
If done right a Windows Advanced Options menu will appear. Select the Safe
Mode option and press Enter.
To return to normal mode just restart your computer as you normally would.

Open the smitRem folder, then double click the RunThis.bat file to start the
tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.
The tool will create a log named smitfiles.txt in the root of your drive,
eg; Local Disk C: or partition where your operating system is installed.

When thats finished run Ewido again.

From the main menu click on 'scanner' then click 'Complete System Scan'
When ewido finds something, it will pop up a notification. Select "Remove"
and check the boxes "Perform action with all infections" and "Create
encrypted backup" then click on ok.When the scan finishes, click on "Save
Report" and save it to your desktop or c:/drive incase you need it again.

Finally run Ccleaner and press the Run Cleaner Button to remove temp files

Reboot Back To Normal Mode

This should fix your problems but if it continues just let us know and post
back the scan logs (smitrem.txt & Ewido's scan log)

You will need to reload your wallpaper after this tool finishes, To change
your wallpaper right click desktop and choose properties, Set the Theme to XP
if you are running XP then goto the Desktop tab and choose your wallpaper
from there.

Regards

Andy
 
Wow, it took awhile to do all of this but it worked!!! I don't know how but
I hope that puppy is long gone. The SpyStrike icon and program were still
listed but not really there.

Thank-you and to all others for the help!!
 
Hi Again

No Problem, Both Smitrem and Ewido will remove SpywareStrike and the
netwrap.dll file from the system32 folder thats connected to the rogue junk
and Smitrem will also remove other related Trojan files such nvctrl.exe &
mscornet.exe so it should now be fully removed from your system, If you find
an empty Spyware Strike folder in program files remove it to clean up,

Ewido will still perform fine after the 14 day trial has expired and just
requires manually updating as the auto updates are part of the free trial so
its maybe worth keeping on your system to be sure it stays clean as they
release updates very often compared to some other scanners.

All The Best

Andy
 
Back
Top