Recent spyware attack

[Guest]

I have recently experienced my first spyware attack and it's not a pretty
story. I have religiously maintained the updates with my MS Win XP Pro, MS
Office and the mulitude of Antispyware software (MS Spyware, Spy Sweeper,
SpyBot, Ad-Aware, Spyware Blaster, Norton Internet Security, Etrust Pest
Patrol and Tauscan 1.7) and the bastar* still got through!. I use my PC
approx 17 hrs per day and daily run the software updates and run the
applications to check for viruses and spyware without any problems. Just
recently I noticed the performanceof the PC to slow down slightly, so I check
all of the options on the spyware software to ensure maximum protection. I
also set MS Int Explorer security level to high and installed and started to
use the FireFox browser, only using MS Int Explorer for Win updates.
Having changed one of the spyware software (Agnitum's Tauscan 1.7) to
maximum 'sensitivity' it detected the following spyware TEQUILA BANDITA
1.3b2.a that had infected the NTLDR file on my C drive. Once I 'disinfected'
the spyware this caused the spyware to attack my MS Win XP Pro system,
causing all aplications including antispyware/antivirus software to crash. My
operating system eventually over 30 mins completely crashed and would not
work. The PC even switched off! I switched on the PC and was immediately told
that various files were missing or corrupted. As my PC has a partitioned HD,
I ran the recovery process and finally after the many hours of formating and
loading up a 'fresh' MS Win XP Pro operational partition, I loaded from CD
the Win XP PRo SP2 update (with broadband network disabled), ran this sw
with no problems, next loaded from CD Norton Antivirus, ran the basic version
before getting updates, with no problems. I then enabled the broadband
connectiuon and carried out the numerous updates for Norton Antivirus and MS
Win XP Pro, finally downloading and updating MS Antivirus (Beta 1) software
with no problems being detected. Just for luck I thought I would run the
Tauscan 1.7 spyware software and bugge* it came back with TEQUILA BANDITA
1.3b2.a had again infected the NTLDR file!!!!!!!
I am about to install a new HD, format and install a fresh "New" MS Win XP
Pro software (not from the partitioned HD) as this seems my only option! -
Has anyone else out there experienced the same problem? From what I can find,
this TEQUILA BANDITA 1.3b2.a was issued in July 2005!
Good luck
Ray
Sydney Australia

 

[Lanwench [MVP - Exchange]]

In

I have recently experienced my first spyware attack and it's not a
pretty story. I have religiously maintained the updates with my MS
Win XP Pro, MS Office and the mulitude of Antispyware software (MS
Spyware, Spy Sweeper, SpyBot, Ad-Aware, Spyware Blaster, Norton
Internet Security, Etrust Pest Patrol and Tauscan 1.7) and the
bastar* still got through!. I use my PC approx 17 hrs per day and
daily run the software updates and run the applications to check for
viruses and spyware without any problems. Just recently I noticed the
performanceof the PC to slow down slightly, so I check all of the
options on the spyware software to ensure maximum protection. I also
set MS Int Explorer security level to high and installed and started
to use the FireFox browser, only using MS Int Explorer for Win
updates.
Having changed one of the spyware software (Agnitum's Tauscan 1.7) to
maximum 'sensitivity' it detected the following spyware TEQUILA
BANDITA
1.3b2.a that had infected the NTLDR file on my C drive. Once I
'disinfected' the spyware this caused the spyware to attack my MS Win
XP Pro system, causing all aplications including
antispyware/antivirus software to crash. My operating system
eventually over 30 mins completely crashed and would not work. The PC
even switched off! I switched on the PC and was immediately told that
various files were missing or corrupted. As my PC has a partitioned
HD, I ran the recovery process and finally after the many hours of
formating and loading up a 'fresh' MS Win XP Pro operational
partition, I loaded from CD the Win XP PRo SP2 update (with
broadband network disabled), ran this sw with no problems, next
loaded from CD Norton Antivirus, ran the basic version before getting
updates, with no problems. I then enabled the broadband connectiuon
and carried out the numerous updates for Norton Antivirus and MS Win
XP Pro, finally downloading and updating MS Antivirus (Beta 1)
software with no problems being detected. Just for luck I thought I
would run the Tauscan 1.7 spyware software and bugge* it came back
with TEQUILA BANDITA
1.3b2.a had again infected the NTLDR file!!!!!!!
I am about to install a new HD, format and install a fresh "New" MS
Win XP Pro software (not from the partitioned HD) as this seems my
only option! - Has anyone else out there experienced the same
problem? From what I can find, this TEQUILA BANDITA 1.3b2.a was
issued in July 2005!
Good luck
Ray
Sydney Australia

Hi - no offense intended, but wow, my eyes started glazing over on your
third sentence or so. Please post concisely, and keep things brief...a lot
of people are likely to ignore your post because of its length and its lack
of separate paragraphs. Also - the best place for spyware related posts is
microsoft.public.security...good luck.

 

[pclogger]

Hi Ray,

You seemed very cluey in IT so may I recommend that you to install
PCLogger to monitor your PC. It is not an anti-viurs software but
rather an audit trail tool. I think it may be useful to track its
source of outbreak. I myself have used the info logged by PCLogger to
fix awinrar and req.dat.

http://www.soft-trek.com.au/prjPCLogger.asp

One more thingy - I saw the latest from Spybot S&D. It should detect
your Tequila Bandita 1.3. Pls visit
http://www.safer-networking.org/en/updatehistory/2005-03-03.html