IST.ISTbar - new flavour with nkrha.exe

[Antonio]

I've found that the nkrha.exe is not detected by Microsoft
Antispyware (or any other software) and an internet search
does not produce any hits.

It appears to regenerate ISTbar registry keys after reboot.

By using:

Antispyware->Advanced Tools->System Explorers->Startup
Programs

this executable may be blocked from startup.

 

[bill sanderson]

Please submit a Tools, suspected spyware report from a
machine with this item in place, if possible.

Thanks for the report.

 

[Antonio]

Please submit a Tools, suspected spyware report from a
machine with this item in place, if possible.

Unfortunately, I can't seem to do that. An error occurs
when submitting the report, and asks me to check Internet
Proxy settings. However, Antispyware is able to check ans
download updates using my current internet settings.

Is there an email address I can send the report file to?

 

[Bill Sanderson]

I don't have an alternative method of submitting a report, I'm afraid. The
report won't send binaries, but it would show the executable's presence in
some startup location. At the current time, that's the best I know to do,
in terms of getting information across. You can bet that the Microsoft team
working on this has good channels of communication open with the
anti-spyware community who monitor new bugs closely--but I'm not in the loop
on how that's accomplished.

 

[Steve Wechsler [MVP]]

Antonio ... would you please rename nkrha.exe to nkrha.xxx, compress it
to a .zip folder, and email it to me ? Name the .zip folder "sample". I
have a way to get the file to MS directly. Thanks.


Steve Wechsler (akaMowGreen)
MVP Windows Server

 

[Bill Sanderson]

Thanks, Steve!

 

[Steve Wechsler [MVP]]

Thanks, Antonio

Steve Wechsler (akaMowGreen)
MVP Windows Server