I use Windows XP. I was infected with AntiSpyCheck 2.1 today. I was downloading a file, and when I opened it AntiSpyCheck 2.1 was with it. My tool bar at the bottom of the screen I see a shield alternating between blue with a "?" and red with a "X". I found one website that had instructions for removal, and I deleted some of the files they said. However their instructions were confusing, so I came here, and it said that it is different for different computers, so I stopped using the other site. Before I had something in my tool bar at the bottom that looked like a yellow solid star of David, but now it is gone.
I currently have two messages on my screen. I do not know if they are from my regular Antivirus program (Symantec AntiVirus) or from AntiSpyCheck 2.1, so I am not closing them.
The first is a yellow speech balloon coming out of a flashing yellow triangle with a "!" on it in my tool bar. The title reads "System Alert: Trojan-Spy.Win32@mx" Below that it says
"Type: Spyware/Trojan
Vulnerable: Windows 90/98/ME/NT/2003/Windows XP/Windows Vista
Description: Spyware program that sends confidential information to a remote attacker
Protection: Click this baloon to download official security software."
Yes it says "baloon" not ballon in the protection sentance.
The second is a pop up. Minimized it has a yellow triangle with a "!" in it. When opened it says "Critical System Warning!" in the blue bar. Below that there is a red circle with an "X" in it and it says
"Type: Spyware
Infection Length: 266,129 bytes
Risk: High
Systems Affected: Windows 95, 98, 2000, NT, 2003 Server, Windows XP, Windows Vista
Behavior: Spyware.CyberLog-X is a spyware program that monitors user activity, logs keystrokes..."
As I was typing it, the box went away and a very fake looking error report came up.
The blue bar says "wcs.exe"
Below that there is a white bar "wcs.exe has encountered a problem and needs to close. We are sorry for the inconvenience." Then there is a very pixely yellow triangle with a "!" inside.
Below the white there is a gray section. "If you were in the middle of something, the information you were working on might be lost.
Please tell Microsoft about this problem.
We have created an error report that you can send to us We will treat this report as confidential and anonymous.
To see what this error report containst, click here."
"Please tell Microsoft about this problem." is in bold, and "click here." is a link.
Below that there are three buttons. On the far left "Debug" and the "b" is underlined. On the far right, "Don't Send" the "D" is underlined, and there are dots surrounding the words in a rectangle. In between the two but more on the right than the left is a button that says "Send Error Report" with the "S" underlined.
If you could help me remove this risk I would be very happy.