A friend’s laptop recently got infected with a bunch of nasty code. How, I’m not sure, it could have been the WMF exploit or any number of other methods. In any case, one of the items slapped on there was a self re-installing spyware removal tool called “Spyware Strike”.
It puts this software on your system, and a fucking ANNOYING systray icon that flashes (and looks a lot like the official M$ security crap), along with a persistently flashing balloon that starts of with “System Instrusion Detected!”
Anyways, this was a new one, so new that the culprit dll “netwrap.dll” wasn’t appearing in google searches. I finally managed to get rid of the thing using Killbox!
The full (so far?) removal method can be found here…