PDA

View Full Version : Warning



canavan
05-10-2004, 09:54 PM
not sure if this is the right place to put this, but to warn you that "alcohol 120% all versions crack exe" contains a w32 spybot worm. i am struggling to get rid of this.

bujub22
05-11-2004, 04:41 AM
lov some pour me a glass :D

Alucard1475
05-11-2004, 06:39 AM
Get your virus definitions updated.

Retail version of A120% should be on suprnova which requires only serial.

Info on how to remove virusHERE (http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html#removalinstructions).

canavan
05-11-2004, 10:57 AM
thanks for that but i have done all that, i am using win xp home, panda titanium 2004 legit version, and zone alarm pro. it is locked in zone alarm trying to get out at about 20 times a minute. in zone alarm it is showing as "ntsys32.exe". panda says there is no virus on a full scan. but the free check on symantec brings it up as 23 infected files.when i go to the registry there are no files that show it,
this is what it has put on my p.c. sorry but i am not an expert on p.c.s.
C:\WINDOWS\system32\ntsys32.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\alcohol 120 all versions crack.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\clone cd crack all versions.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Foxtel austar and Satellite Pay tv hack smart card cloner.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Hack any pc program.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\hack any pop3 email account.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\illegal britney spears pics before she was 18.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Jannet jackson superbowl picks and clips.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\kazaa hacker sercret codes.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\kazaa speed booster hack.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Microsoft office crack all versions.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\N-Gage came cloning software is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Naked britney spears undresser great.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\nero burning rom crack all versions.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\nokia free calls codes all nokias.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Pay Tv hacker.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\porn site password cracker.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Real hotmail hacker.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Real yahoo mail cracker.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Secret mobile phone codes free calls.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Secret nokia codes free calls.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Virtual sex woman orgasm game.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\Windows crack and keygen all versions.exe is infected with W32.Spybot.Worm
C:\WINDOWS\system32\kazaabackupfiles\xp crack and keygen all versions.exe is infected with W32.Spybot.Worm

junkyardking
05-11-2004, 11:43 AM
try avg instead.

manker
05-11-2004, 12:10 PM
hehe this name gave me a laugh - illegal britney spears pics before she was 18.exe - lots of the others are funny too but dont worry you haven't downloaded those files. they are generated by the varient of Win32 worm that you have.

removal instructions are here (http://www.sophos.com/virusinfo/analyses/w32spybotdd.html)

manker

Cyril
05-11-2004, 12:12 PM
Dude, you gotta learn to scan files BEFORE you open them and then scan again before you run them.

canavan
05-11-2004, 12:24 PM
Originally posted by Cyril@11 May 2004 - 12:20
Dude, you gotta learn to scan files BEFORE you open them and then scan again before you run them.
as i said before i do scan all but it was not found on scan.

manker
05-11-2004, 12:31 PM
then update your virus software. as has been posted symantic and sophos are aware of this worm so would have updated their soft by now.

in any case step by step manual removal instructions have been linked in this thread, at this point in time you should be cleaner than a British 100 metre sprinter (ahem)

manker

canavan
05-11-2004, 12:39 PM
thanks manker,
i will try the instructions you gave me the link for later.
will let you know how i get on.

canavan
05-12-2004, 02:19 AM
thanks again, followed that through word for word and got rid of it after 3 attempts :lol:

manker
05-12-2004, 11:16 AM
wey hey! glad to hear it :D