Computing.Net > Forums > Security and Virus > HELP! W32.Spybot.Worm

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

HELP! W32.Spybot.Worm

Reply to Message Icon

Original Message
Name: Poise_3
Date: April 20, 2005 at 05:54:08 Pacific
Subject: HELP! W32.Spybot.Worm
OS: Computer?
CPU/Ram: i have no clue
Comment:

The thing is i have W32.Spybot.Worm. I don't know how to get rid of it! I use Symantec AntiVirus, but it doesnt seem to work because it cannot seem to delete or clean the file. Neither can it put the file in Quarantine. The thing is i have two W32.Spybot.Worm, one is in the API hotkeys file and the other is in a file called " cthelper.exe " . I desperatly need help.

Pls pls anyone who has any suggestions say so, anything will appreciated at this point.


Report Offensive Message For Removal


Response Number 1
Name: GerryC
Date: April 20, 2005 at 08:14:56 Pacific
Reply: (edit)

Have a look at Symantec's removal instructions:

http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html


Report Offensive Follow Up For Removal

Response Number 2
Name: Poise_3
Date: April 20, 2005 at 08:26:50 Pacific
Reply: (edit)

I did... it didn't help much. SO i 've been surfing the net for the whole day and i downloaded this software called "Trend Micro"... after that i downloaded a task maager.
this is what a website said:

Because W32.Spybot terminates task manager and regedit you need another tool to terminate the malware processe(s):
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

This is a freeware tool and has similar features like Windows built in task manager.


The thing is i downloaded it but i don't have a clue what it means! OR DOES for the matter. BUT finally my symantec said they were no viruses found. 3 Viruses are on Quartine and the other one i deleted by going on "Find" and locating the file, turned out it was internet file and so i deleted that and it's cookies.
NOW the only problem is that i have a this frustating Icon, it is a red circle witha white "X". I have no clue what it is, its not a software becaue i went on add or remove in control panel and it's not listed there. It also has no shortcuts its JUST ON MY TASKBAR. I am soo desperatly confused. =(
Another thing is that when i click on this icon it links me to a site:
http://www.hotoffers.info/ad0278

The fact is it is obvisously a site infested with virus. Another thing (Sorry!) i keep getting these pop-up message that i STILL have spyware and worms in my computer!

Have i done something wrong? What is going on?

pls if anyone knows whats going on, tell me
=(


Report Offensive Follow Up For Removal

Response Number 3
Name: bofra
Date: April 20, 2005 at 10:26:08 Pacific
Reply: (edit)

win_xp?..try right clicking on icon and get properties, delete icon, search for any other links to icon and trash, empty temp folders, with system retore temporarly off go into safe mode and scan with adawareSE or spybot , using regedit/regdt , search for spybot, hotoffers, or any thing else found in scans and delete files, processXp views files that are running, anything in the red highlite, check for relavance , if not required diable or remove,
also check all programs> startup folder> and disable unknowns, check msconfig>startup as well ...:)


Report Offensive Follow Up For Removal

Response Number 4
Name: johny23
Date: May 3, 2005 at 08:54:18 Pacific
Reply: (edit)

Guys, i have windows xp and windows 2000 professional in 2 partions in my computer. I use dsl on both. I installed kazaaa in windows xp and the virus seems to be staying permanently at the windows 2000 partition. I use Norton Antivirus corporate version on both OS's. Im able to work with Windos xp, but when i switch on dsl in windows 2000 the system freezes. Norton removes virus infected .exe files but they keep coming again in windows2000. I followed all steps at the symantec website, but it aint working!. Plz help me guys.


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software