Helping people with computers... one answer at a time.

In most cases getting rid of malware involves running up to date scanners for viruses and spyware, and then making sure you're behind a firewall.

I run Win XP PRO. As I am connecting to the internet I see in the tool bar the two screens for the internet connection always active and the received bytes increasing continuously. I think this is a worm or spy program but I don't know how can remove it without formatting my hard drive. Do you have any tips?"

Well certainly formatting shouldn't be needed. Just follow the steps from the previous article: How do I keep my computer safe on the internet?. In a nutshell:

  • Run a virus scanner.

  • Run a spyware scanner.

  • Use a firewall.

Article C1953 - May 27, 2004

Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Recent Comments
37 Comments

Hi. I think i have two worms on my computer, I had Avg to scan my computer but it didn't work so i tried t re install it but i couldn't. Now the Icons on my descope are gone. and i cant open any of my files. Not games no internet or anything Please help !

Posted by: Nina at February 27, 2010 7:41 AM

well this is not really a comment but i need some advice while i was surfing through my myspace i had clicked on a profile and i got a parasite named adware and i used anti-virus programs avg free 8.5 and malware bytes anti- malware and avira antivirual control center and right about now i'm trying to get rid of the adware parasites how long will it take for me to get rid of the adware parasite and if not what can i do to get rid of the parasite and how can i repair my computer.thankyouverymuch sincerely eugene

Posted by: Eugene at October 19, 2010 5:00 PM

Hi Leo. I copped a worm/virus/hacker yesterday. Yeah, no wories. Removed it with Spybot but now when I connect my Internet USB it comes up again. Something tells me my Sim card in the USB may have it. How do I remove it from there? Please.
Bill

The most common way to remove a virus from a USB stick is to copy off the data and reformat the stick. That's what I recommend. If not an option you'll need to instruct your anti-malware tools to perform a scan of the device.
Leo
16-Nov-2010

Posted by: Bill Ross at November 15, 2010 5:11 PM

Oh. It over-rides my Security and Firewall as well.

Posted by: Bill Ross at November 15, 2010 5:13 PM

I have Webroot Antivirus Spysweeper to detect and deal with cookies and spyware...Today, I found 1 Spyware cookie and my computer froze...as well as 7 cookies that showed up.


Time and again, these cookies are quarantined..and I have the choice of "selecting"

or "deselecting" them..What action should I take?

My guess is that they're simply tracking cookies and they'll just keep coming back no matter which you select. More here: Why does my anti-spyware program keep reporting the same cookies?
Leo
22-Nov-2010

Posted by: Richard at November 21, 2010 11:39 AM
Post a comment on "I suspect spyware or a worm, how do I get rid of it?":





Remember Me?

(You may use HTML tags for style)

Before commenting, please...

  • READ THE ARTICLE. A comment that shows you didn't will be deleted and ignored.

  • Comment only on the article. Use the search box at the top of the page if you have a question about something else.

  • NO PERSONAL INFORMATION in the comment. No email addresses. No phone numbers. No physical addresses.

  • Anything that looks the least bit like spam will be deleted. Links to unrelated sites or links that appear to be primarily promotional will be deleted, or the comment will be deleted.

  • Don't ask me to recover lost passwords or hacked accounts. I can't. Those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...