said: 'Your computer is infected!'

Original Message

Name: syskplim
Date: August 18, 2005 at 12:44:05 Pacific
Subject: said: 'Your computer is infected!'
OS: Win2k Pro
CPU/Ram: PIII 800 /512Mb

Comment:

A red icon is sticked on my system tray and always says that my computer infected!. i have chacked my registry, startup and services but no aliens found.
Installed: ZA, Microsoft AntiSpyware, Spybot - Search & Destroy&; Symantec AntiVirus Corp 9

Report Offensive Message For Removal

Response Number 1

Name: smifff
Date: August 18, 2005 at 12:52:31 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

Hi syskplim
Is this what you have
http://securityresponse.symantec.com/avcenter/venc/data/trojan.desktophijack.c.html
If any advice helps, please post back as it might help others.

Report Offensive Follow Up For Removal

Response Number 2

Name: syskplim
Date: August 18, 2005 at 13:25:43 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

smifff:
yes! something similar but i think this is a updated version of this spyware and some different things are:
1. default homepage is not www.psguard.com but www.worldantispy.com
2. same icon stay in system tray but never see any popup black screen.
3. i can't find any file suggested by Symantec
Maybe next time .....

Report Offensive Follow Up For Removal

Response Number 3

Name: XpUser4Real
Date: August 19, 2005 at 09:28:38 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

Try this: On-line Spyware Scan
Hopefully my advice will help you...Please post back with your results....thanks

Report Offensive Follow Up For Removal

Response Number 4

Name: Abnormal
Date: August 19, 2005 at 19:46:46 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

Domain Name: WORLDANTISPY.COM
Registrant:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297
Creation Date: 25-Jul-2005
Expiration Date: 25-Jul-2006
Domain servers in listed order:
ns0.worldantispy.com
ns1.worldantispy.com

Administrative Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297
Technical Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297
Billing Contact:
Distant World LTD
Den Travis (dtravisltd@yahoo.com)
Paseo Triunfo De La Republica #3745 Circuito Pronaf
Ciudad Juarez
,32310
MX
Tel. +998.9149297
Status:ACTIVE
You may want to post a hijackthis log at this forum, with the subject line WorldAntiSpy.com
Getting Help w/ Spyware:

Report Offensive Follow Up For Removal

Response Number 5

Name: soorya
Date: August 21, 2005 at 12:13:31 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

HERE IS THE SOLUTION TO REMOVE WORLDANTISPY
Go to AddRemove and search for "InternetUpdate" then remove it.
the Red icon in the systray is gone.
And Search for "WorldAntiSpy" and remove that too.
pls. spread this to all.
pls mail me the result @
blackmagic2000@gmail.com

Report Offensive Follow Up For Removal


Your Computer is infected ! virus Help your computer is infected your computer is infected bubble What to Do if Your PC is Infected F Virus Or Spyware Infection?	Spyaxe popups Virus Alert Popup! Computer Virus Problems Removed Viruses undetectable virus

Response Number 6

Name: Abnormal
Date: August 22, 2005 at 17:24:58 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

Your other post
http://www.experts-exchange.com/Applications/Viruses/Q_21532161.html

Report Offensive Follow Up For Removal

Response Number 7

Name: MystWyrm
Date: August 24, 2005 at 22:43:43 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

I dont have a red dot like everyone is talking about but I somehow have worldantispy.com software on my system and I did NOT download it. I can do its own uninstall as well as remove it in the add/remove programs; however, as soon as I restart my computer it's back!
Any suggestions anyone?

Report Offensive Follow Up For Removal

Response Number 8

Name: Mia73
Date: August 26, 2005 at 01:31:49 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

I keep getting this message
:This Sytstem is shutting down. Please save save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.Time before shutdown: 00:00:10 (sometimes only 00:00:03)
Message Reboot initated by the Allaire ClusterCATS IP ALlias Deaemon due to an IP address conflict.
So far I have read many messages, but not exactly like the one I get. I am hoping someone can help me. I've run threw pretty much all I can in regedit and gotten rid of anthing ClusterCATS. Run my system in safe mode and ran the NAV and Spybot S&D. Had a virus it was "fixed". (I am using a cable to connect my laptop with my pc) Everytime I unplug the cable I time out in less than 10 or less. As long as I have internet connection on it I am fine. Can someone PLEASE help me. I am pulling my hair out with this, about to look like Kojak's twin sister.
Thanks in advance,
Mia

Report Offensive Follow Up For Removal

Response Number 9

Name: 1337psycho
Date: August 29, 2005 at 14:12:53 Pacific
Subject: said: 'Your computer is infected!'

Reply: (edit)

i suggest getting rid of worldantispy then in the worldantispy folder create a new .txt file, then rename it to "worldantispy.exe" then right click on it select properties and change it to read only and it's pwned!

Report Offensive Follow Up For Removal