Menu

Virus Information


Prevalence: orange Medium

Name: Adware-Spywarestrike

Type: Adware

How it spreads: Internet Downloads

Affected operating: Windows

Aliases: --

Date of surface: 9 January 2006
It is detected as a "potentially unwanted program". This is an anti-spyware application claiming to remove unwanted malicious spyware programs in an attempt to get you to purchase the full version of the product. In order to clean or delete any files labeled as “malicious spyware”, you must first enter a valid serial number to activate the full version or click on the “Buy Online” button and purchase the full version.

This is simply a rebranded version of Adware-Spyaxe. It increases in overhead bandwidth due to download of additional components or updates.


A privacy policy is not displayed during installation. However, a policy can be accessed on the author`s website: http://www.spywarestrike.com/privacy.php

Files Added:

Installer: ss_setup.exe (2553 KB)
MD5: 232aa1a52c70fa4d5c7ad1d09b18b4d4
%ProgramFiles%\spywarestike\uninst.exe (35 KB)
MD5: 1084efccdec44d0b86d1be7398262a0d
%ProgramFiles%\spywarestike\spywarestike.url (1 KB)

%ProgramFiles%\spywarestike\spywarestike.exe (1376 KB)
MD5: bdc731bde32534d216af1eab8efa8b3f
%ProgramFiles%\spywarestike\signatures.ref (994 KB)

%ProgramFiles%\spywarestike\msvcr71.dll* (348 KB)

%ProgramFiles%\spywarestike\msvcp71.dll* (499 KB)

%ProgramFiles%\spywarestike\lang\english.ini (size may vary)

%ProgramFiles%\spywarestike\quarantine\

c:\documents and settings\(user name)\start menu\spywarestike 2.5.lnk (1 KB)

c:\documents and settings\(user name)\start menu\programs\spywarestike\uninstall spywarestike 2.5.lnk (1 KB)

c:\documents and settings\(user name)\start menu\programs\spywarestike\spywarestike 2.5.lnk (1 KB)

c:\documents and settings\(user name)\start menu\programs\spywarestike\spywarestike 2.5 website.lnk (1 KB)

c:\documents and settings\(user name)\desktop\spywarestike.lnk (1 KB)

c:\documents and settings\(user name)\application data\microsoft\internet explorer\quick launch\spywarestike 2.5.lnk (1 KB)
<b>You have to remove the virus. You need to do one of the following things:</b><BR><BR>1) The latest virus vaccine update of eScan removes the worm from your system. Ensure that Internet access for your system is running. Right click on <img src="../images/e.gif" align="absmiddle"> and click <b> Download eScan update</b>. The latest updates are downloaded,your system is scanned and the worm is removed.<BR><BR><b>OR</b><BR><BR>2) Download the free MicroWorld Anti Virus Toolkit</a> (MWAV Tool Kit). The tool checks your machine for viruses. If any illegal dialers or sniffer tools have been installed they are detected. <BR><BR><BR><a name="mwav"><b>MWAV Tool Kit</b></a><BR>(Download the free MicroWorld Anti Virus Toolkit that detects viruses in system registry and running processes)<BR><BR><a href="ftp://ftp.microworldsystems.com/download/tools/mwav.exe">Link 1</a><BR><a href="ftp://update.mailscan.info/download/tools/mwav.exe">Link 2</a><BR><a href="http://www.mwti.net/download/tools/mwav.exe">Link 3</a><BR><BR><b>eScan Internet Security Suite (ISS)</b></a><BR>(Download MicroWorld`s eScan that detects viruses in system registry,running processes and has a real time monitor)<BR><BR><a href="ftp://ftp.microworldsystems.com/download/escan/es2k3e/iwn2k3e.exe">Link 1</a><BR><a href="ftp://ftp.das.com/mwti/download/escan/iwn2k3e.exe">Link 2</a><BR><a href="ftp://mwti.matrix.lv/download/escan/iwn2k3e.exe">Link 3</a><BR><a href="ftp://update.mailscan.info/download/escan/iwn2k3e.exe">Link 4</a><BR><a href="ftp://abundis.net/download/escan/iwn2k3e.exe">Link 5</a><BR><a href="http://www.mwti.net/download/escan/es2k3e/iwn2k3e.exe">Link 6</a><BR>
It is detected as a "potentially unwanted program". This is an anti-spyware application claiming to remove unwanted malicious spyware programs in an attempt to get you to purchase the full version of the product. In order to clean or delete any files labeled as “malicious spyware”, you must first enter a valid serial number to activate the full version or click on the “Buy Online” button and purchase the full version. <BR><BR>This is simply a rebranded version of Adware-Spyaxe. It increases in overhead bandwidth due to download of additional components or updates. <BR><BR>A privacy policy is not displayed during installation. However, a policy can be accessed on the author`s website: http://www.spywarestrike.com/privacy.php <BR><BR>Files Added:<BR><BR>Installer: ss_setup.exe (2553 KB)<BR>MD5: 232aa1a52c70fa4d5c7ad1d09b18b4d4 <BR>%ProgramFiles%\spywarestike\uninst.exe (35 KB)<BR>MD5: 1084efccdec44d0b86d1be7398262a0d <BR>%ProgramFiles%\spywarestike\spywarestike.url (1 KB)<BR><BR>%ProgramFiles%\spywarestike\spywarestike.exe (1376 KB)<BR>MD5: bdc731bde32534d216af1eab8efa8b3f <BR>%ProgramFiles%\spywarestike\signatures.ref (994 KB)<BR><BR>%ProgramFiles%\spywarestike\msvcr71.dll* (348 KB)<BR><BR>%ProgramFiles%\spywarestike\msvcp71.dll* (499 KB)<BR><BR>%ProgramFiles%\spywarestike\lang\english.ini (size may vary)<BR><BR>%ProgramFiles%\spywarestike\quarantine\<BR><BR>c:\documents and settings\(user name)\start menu\spywarestike 2.5.lnk (1 KB)<BR><BR>c:\documents and settings\(user name)\start menu\programs\spywarestike\uninstall spywarestike 2.5.lnk (1 KB)<BR><BR>c:\documents and settings\(user name)\start menu\programs\spywarestike\spywarestike 2.5.lnk (1 KB)<BR><BR>c:\documents and settings\(user name)\start menu\programs\spywarestike\spywarestike 2.5 website.lnk (1 KB)<BR><BR>c:\documents and settings\(user name)\desktop\spywarestike.lnk (1 KB)<BR><BR>c:\documents and settings\(user name)\application data\microsoft\internet explorer\quick launch\spywarestike 2.5.lnk (1 KB)<BR><BR>The following registry keys are created: <BR><BR>HKEY_LOCAL_MACHINE\SOFTWARE\SpywareStrike<BR><BR>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run<BR>"SpywareStrike"="C:\Program Files\SpywareStrike\SpywareStrike.exe /h"<BR><BR>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\<BR>Uninstall\SpywareStrike<BR><BR>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion<BR>\App Paths\SpywareStrike<BR>"default"="C:\Program Files\SpywareStrike\SpywareStrike.exe"<BR><BR>HKEY_CLASSES_ROOT\Interface\{66F0AC1C-DED5-4965-9E31-39788DF1B264} <BR><BR>HKEY_CLASSES_ROOT\Interface\{849E056A-D67A-431E-9370-2275F26D39B5} <BR><BR>HKEY_CLASSES_ROOT\Interface\{8B7AFBFD-631C-45BA-9145-F059EB58DD73} <BR><BR>HKEY_CLASSES_ROOT\Interface\{AFEB8519-0B8B-4023-8C15-FFB17D5225F9} <BR><BR>HKEY_CLASSES_ROOT\Interface\{BA9CC151-4581-438E-94AF-4C703201B7CA} <BR><BR>HKEY_CLASSES_ROOT\Interface\{BC74C336-FF2C-40C9-AD4E-3772C208406B} <BR><BR>HKEY_CLASSES_ROOT\Interface\{BDF00F24-A571-
Live Chat