Deadliest spyware as of 2007

ryan007 · 01-23-2007, 10:13 AM

One of my clients got this, IE-AU PS, spyware on his laptop. I've done an extensive research on this subject matter, have tried every anti-spyware on earth, nothing came up, a day later, took the last step, reformatted the whole hard drive, but somehow this spyware made it through, and still exist somewhere in the computer.

According to this anti-spyware, "CounterSpy", this is a password cracker/stealer type spyware, but for some reason it didn't detect this.

Symptom: Whenever I go to "my computer", click on anyone of the drive and open it, another internet explorer desktop icon will appear with some random website setted as the homepage.

Anyhelp would be greatly appreciated!

RayH · 01-23-2007, 11:36 AM

This is from a fresh install on a formatted drive? Is this without ANY web browsing activity afterwards?

There are two main ways that the PC is getting re-infected:

1. It is a virus that spreads via LAN-type means and is getting attacked by another computer on the LAN that is still infected but noone knows about (or noone is admitting to, this is common too).

2. The person is browsing to a site that is re-infecting it again, at which point you can look in their browsing history to narrow down the infected site.

Good luck!

-Ray

cricket57 · 01-23-2007, 01:35 PM

The problem here is that it's probably a well-known infection - but Sunbelt Software (CounterSpy) have given it a name not recognised by other security vendors. It may be worthwhile running a scan with other programs / facilities, such as Housecall, Panda Scan, Superantispyware, Prevx1, etc, just to see if it goes under a different alias?

Scrat · 01-23-2007, 02:04 PM

Have a read of this Thread....it'll get you going in the right direction in regards to cleaning it off the computer.

ryan007 · 01-23-2007, 10:38 PM

Thank you for all of your help, guys. I will take your great advices and see what will happen next. Thanks again.

01-23-2007, 10:13 AM	#1 (permalink)
ryan007 New Member Join Date: Jan 2007 Posts: 2	Deadliest spyware as of 2007 One of my clients got this, IE-AU PS, spyware on his laptop. I've done an extensive research on this subject matter, have tried every anti-spyware on earth, nothing came up, a day later, took the last step, reformatted the whole hard drive, but somehow this spyware made it through, and still exist somewhere in the computer. According to this anti-spyware, "CounterSpy", this is a password cracker/stealer type spyware, but for some reason it didn't detect this. Symptom: Whenever I go to "my computer", click on anyone of the drive and open it, another internet explorer desktop icon will appear with some random website setted as the homepage. Anyhelp would be greatly appreciated!

01-23-2007, 02:04 PM	#4 (permalink)
Scrat Platinum Member Join Date: Aug 2004 Location: Sydney, Australia Age: 27 Posts: 630	Have a read of this Thread....it'll get you going in the right direction in regards to cleaning it off the computer. __________________ AMD Athlon 64 3500+, GigaByte GA-K8NS Ultra-939 Ltd Ed. ATI Radeon GeCube 256Mb 9600XT, Compro DVB-T300 Dig/Analog TV Card 2x 1GB, 2x 512Mb DDR CL3 400Mhz PC3200 - Dual Channel WD 120Gb SATA 7200rpm 8MB, WD 80Gb SATA 7200rpm 8MB Excel 108Mb Wireless PCI, WinXP Prof. Samsung CD-R/RW 52-32-52, Samsung DVD 16x reader, LG DVD MultiBurner Benq 17" FP71E 12ms LCD, Logitech LX700 K&M, Logitech G25 Racing Wheel, Logitech Z-5400 FOLDING FOR THE GOOD OF MANKIND!! Team 44358

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Spybot question...	SLLAB02	Computer Security	17	08-26-2006 07:04 AM
Lightest Active ADWARE/SPYWARE scanner	bigcomp	Computer Security	12	08-11-2006 06:06 AM
HJT log	34erd	Computer Security	5	08-10-2006 01:03 PM
My Computer Guide...	jbrown456	General Software	0	10-18-2005 02:16 AM
If anyone of you wonders what spyware is	Fure6	Internet Discussion	0	02-07-2005 03:11 AM

01-23-2007, 11:36 AM	#2 (permalink)
RayH New Member Join Date: Dec 2006 Posts: 15	This is from a fresh install on a formatted drive? Is this without ANY web browsing activity afterwards? There are two main ways that the PC is getting re-infected: 1. It is a virus that spreads via LAN-type means and is getting attacked by another computer on the LAN that is still infected but noone knows about (or noone is admitting to, this is common too). 2. The person is browsing to a site that is re-infecting it again, at which point you can look in their browsing history to narrow down the infected site. Good luck! -Ray

01-23-2007, 01:35 PM	#3 (permalink)
cricket57 New Member Join Date: Jan 2007 Posts: 20	The problem here is that it's probably a well-known infection - but Sunbelt Software (CounterSpy) have given it a name not recognised by other security vendors. It may be worthwhile running a scan with other programs / facilities, such as Housecall, Panda Scan, Superantispyware, Prevx1, etc, just to see if it goes under a different alias?

01-23-2007, 10:38 PM	#5 (permalink)
ryan007 New Member Join Date: Jan 2007 Posts: 2	Thank you for all of your help, guys. I will take your great advices and see what will happen next. Thanks again.