Q: How do I remove Backdoor.wirenet.2 from my Mac. DrWeb has detected it but can not remove.

I believe you can inactivate it as follows.

Yes, that will remove the malware itself. However, as I have already pointed out, this malware provides backdoor functionality, so removing the malware does not ensure a clean system.

As for your disparaging remarks about anti-virus software, and about the intelligence of anyone who gets infected with malware -- people having problems like these need education, not condescension.

removing the malware does not ensure a clean system

All indications, including those given by the OP, are that it's not a rootkit. It runs with user privileges. It is not, therefore, going to do anything too clever such as replacing system binaries. Besides the login item, there's no sign of any hooks that would start a background process or inject code into an existing one.

As for your disparaging remarks about anti-virus software, and about the intelligence of anyone who gets infected with malware

I made no disparaging remarks about the intelligence of anyone who gets infected with malware. I could have made some disparaging remarks about the intelligence of others, but I've resisted the temptation to do so.

people having problems like these need education, not condescension

Which is precisely my point. You're the one who thinks decent people are outclassed intellectually by the scumbags who infest the Pirate Bay. That's condescension.

I could have made some disparaging remarks about the intelligence of others, but I've resisted the temptation to do so.

I don't think there's anything productive to be gained by continuing this discussion when you're going to resort to such insults. I prefer to discuss the facts.

I wasn't referring to you, if that's what you're thinking. I don't agree with a lot of your positions, but I don't think you're stupid. If I did think that, I'd just ignore you.

Round 200+ of a continuing pointless, usually unproductive, running sore of a discussion. All about superior attitude, not intelligence (which would appear to be a completely misunderstood concept.) And there is a distinct difference between intelligence and wisdom, which someone in this thread appears not to have learned.

This doesn't help you at this point, but I just thought you deserved to know that you should be protected from this malware in the future. Apple updated XProtect yesterday, and now it blocks the samples of Wirenet.2 that I submitted to them on Thursday.

New NetWeird variants added to XProtect

You removed "DownLite," and you also removed the login item part of "NetWeird." If you also removed the .Install folder, then you should be OK as far as malware goes. You still have "MacKeeper," which is not malware but is useless junk, and you should remove that too. I posted instructions on the first page of this thread.

The script ran about three times as fast without "DrWeb" also running.

Please take to heart what I wrote about changing the way you use the computer.

I guess I'd have to say that I'm not as confident as Linc that you've removed all of the threat (which is quite unusual). We know that NetWeird / WireNet is capable of downloading and installing additional malware, but have not yet seen any evidence of any nor what it might be capable of. Just watch for any strange things that occur going forward.

Also, you should recall that we have seen evidence that it is capable of harvesting userid/password credentials that you have entered into a browser, so be sure to change any passwords that you may have used in that manner.