Spyware Report Proxy error? Raw report BUG

  • Thread starter Thread starter Rich-Illinois
  • Start date Start date
R

Rich-Illinois

Sorry if I should have posted first here rather than
General, since it's more a network-related problem, but:
Always have a couple new spyware entries installed after
each scan, telling me that although "IST" has
been "removed" by MS-AS, something is still loading more.
Two processes, randomly named "mnfogvzh.exe"
and "galwlhfn.exe" are running now, and NOT (yet)
identified as spyware, though a google search turns up NO
hits...so they gotta be malware, located in
c:\windows\system32.
Suspect report attempts always come back with a
network/connection error:
"An error occurred submitting the scan results. Please
check you(sic) Internet proxy settings and try again."
There is NO proxy. We are on a LAN with DSL direct access
through a router, which may be a firewall issue but there
is no IT person to look into that (installed by the ISP
years ago).

Also, I thought to view the "Raw" scan report and try to
find somewhere at Microsoft to email it to...no luck.
Clicking on this does nothing. No report, raw or
otherwise, is opened.
 
Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam. I'll help you get rid of your
bugs.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)
 
Kill the Processes using Task Manager (also check MSConfig to make sure
that they're not reloaded on Startup) and then do a Full system scan,
with all 3 boxes checked, with MSAS.
Have successfully removed "IST" on several systems with MSAS. Unless
you're dealing with a newer variant, you *should* be able to remove it.
Try a scan in Safe Mode after doing a Full system scan in normal Windows
mode if it's persistent.

Steve Wechsler (akaMowGreen)
MS-MVP 2004-2005

===============
*-343-* FDNY
Never Forgotten
===============
 
Steve Dodson has mentioned that he has additional tips for resistant ISTBar
sufferers.

If this isn't going away after cleaning with Microsoft Antispyware, send
email to

(e-mail address removed)

with ISTBAR in the subject header.
 
Back
Top