Tom's Guide | Tom's Hardware | Tom's Games

Computing.Net > Forums > Security and Virus > said: 'Your computer is infected!'

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

said: 'Your computer is infected!'

Reply to Message Icon

Name: syskplim
Date: August 18, 2005 at 12:44:05 Pacific
OS: Win2k Pro
CPU/Ram: PIII 800 /512Mb
Comment:

A red icon is sticked on my system tray and always says that my computer infected!. i have chacked my registry, startup and services but no aliens found.

Installed: ZA, Microsoft AntiSpyware, Spybot - Search & Destroy&; Symantec AntiVirus Corp 9



Sponsored Link
Ads by Google

Response Number 1
Name: smifff
Date: August 18, 2005 at 12:52:31 Pacific
Reply:

Hi syskplim

Is this what you have

http://securityresponse.symantec.com/avcenter/venc/data/trojan.desktophijack.c.html

If any advice helps, please post back as it might help others.


0

Response Number 2
Name: syskplim
Date: August 18, 2005 at 13:25:43 Pacific
Reply:

smifff:

yes! something similar but i think this is a updated version of this spyware and some different things are:

1. default homepage is not www.psguard.com but www.worldantispy.com

2. same icon stay in system tray but never see any popup black screen.

3. i can't find any file suggested by Symantec

Maybe next time .....


0

Response Number 3
Name: XpUser4Real
Date: August 19, 2005 at 09:28:38 Pacific
Reply:

Try this: On-line Spyware Scan

Hopefully my advice will help you...Please post back with your results....thanks


0

Response Number 4
Name: Abnormal
Date: August 19, 2005 at 19:46:46 Pacific
Reply:

Domain Name: WORLDANTISPY.COM

Registrant:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297

Creation Date: 25-Jul-2005
Expiration Date: 25-Jul-2006

Domain servers in listed order:
ns0.worldantispy.com
ns1.worldantispy.com


Administrative Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297

Technical Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297

Billing Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297

Status:ACTIVE

You may want to post a hijackthis log at this forum, with the subject line WorldAntiSpy.com

Getting Help w/ Spyware:


0

Response Number 5
Name: soorya
Date: August 21, 2005 at 12:13:31 Pacific
Reply:

HERE IS THE SOLUTION TO REMOVE WORLDANTISPY

Go to AddRemove and search for "InternetUpdate" then remove it.
the Red icon in the systray is gone.

And Search for "WorldAntiSpy" and remove that too.

pls. spread this to all.
pls mail me the result @
blackmagic2000@gmail.com


0

Related Posts

See More



Response Number 6
Name: Abnormal
Date: August 22, 2005 at 17:24:58 Pacific
Reply:

Your other post

http://www.experts-exchange.com/Applications/Viruses/Q_21532161.html


0

Response Number 7
Name: MystWyrm
Date: August 24, 2005 at 22:43:43 Pacific
Reply:

I dont have a red dot like everyone is talking about but I somehow have worldantispy.com software on my system and I did NOT download it. I can do its own uninstall as well as remove it in the add/remove programs; however, as soon as I restart my computer it's back!

Any suggestions anyone?


0

Response Number 8
Name: Mia73
Date: August 26, 2005 at 01:31:49 Pacific
Reply:

I keep getting this message
:This Sytstem is shutting down. Please save save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.Time before shutdown: 00:00:10 (sometimes only 00:00:03)
Message Reboot initated by the Allaire ClusterCATS IP ALlias Deaemon due to an IP address conflict.
So far I have read many messages, but not exactly like the one I get. I am hoping someone can help me. I've run threw pretty much all I can in regedit and gotten rid of anthing ClusterCATS. Run my system in safe mode and ran the NAV and Spybot S&D. Had a virus it was "fixed". (I am using a cable to connect my laptop with my pc) Everytime I unplug the cable I time out in less than 10 or less. As long as I have internet connection on it I am fine. Can someone PLEASE help me. I am pulling my hair out with this, about to look like Kojak's twin sister.

Thanks in advance,
Mia



0

Response Number 9
Name: 1337psycho
Date: August 29, 2005 at 14:12:53 Pacific
Reply:

i suggest getting rid of worldantispy then in the worldantispy folder create a new .txt file, then rename it to "worldantispy.exe" then right click on it select properties and change it to read only and it's pwned!


0

Sponsored Link
Ads by Google
Reply to Message Icon



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links
Ads by Google


Results for: said: 'Your computer is infected!'
your computer is infected bubble www.computing.net/answers/security/your-computer-is-infected-bubble/19805.html

Your Computer is infected ! virus www.computing.net/answers/security/your-computer-is-infected-virus/20339.html

Help your computer is infected www.computing.net/answers/security/help-your-computer-is-infected/21376.html