Network Hijacked

[DZ]

There is a spyware that coincided with the
installation/uninstallation of Google Earth and is sitting
deep in the networking software. Everytime I boot the
system, there is a Service calls which if I deny it
disconnects me completely from the internet and does not
allow me to go online unless I reboot and allow it pass the
firewall. I ran many anti-spyware software but it cannot
find it. When I compiled a report in MS Antispyware, it
repeatedly did not go through saying there is a problem
with the proxy server.
DZ

 

[plun]

Well, Google Earth (a great program)
uses streaming to build maps (satellite photos) and other
information. Beacuse of this the firewall must be opened.

What firewall are you using ? I believe that you have blocked
to much !?

Easy way to see all connections, Sysinternals TCPview.
http://www.sysinternals.com/Utilities/TcpView.html

More about Google Earth
http://earth.google.com

 

[Bill Sanderson]

I agree with pluns advice.

The proxy server message from Microsoft Antispyware is probably a bug,
unless you have settings for a proxy server in your IE connection settings,
and they are incorrect.

 

[plun]

Thanks Bill

Where am I, totally lost

http://hem.bredband.net/b288305/where.jpg

 

[DZ]

I have removed Google Earth completely. My concern now is
that there is a spyware sitting deep into the networking
and not only commands that I allow it to access the
internet (or else I am cut off completely), but also does
not allow me to send MS generated reports. I tried many
antispyware but none could find it. How can I send the
rport to MS and to whom manually? The checkpost report
generated creates a raw file that can be attached to an e-mail.
DZ

 

[plun]

Well, from Google Earth you don´t get any spyware.

Maybe if you restart in safe mode and scan you can find
this mysterious spyware

 

[Guest]

If there was a problem with the proxy server then I could
not have connected at all. Only if I allow the service call
to go through the firewall at the boot time, then only I
have connection. But the connection does not allow me to
send MS generated reports of any type to the MS, and that
is when I guess the proxy error. There is something funny
going on.
DZ

 

[Bill Sanderson]

I've only seen this message in relation to Tools, Suspected spyware reports.
And I've seen it on machines apparently identically configured to others
which don't show the problem.

It isn't a configuration issue you can solve easily, I'm afraid. As far as
I know, all other functionality within the program is working correctly on
such a machine, including definition and code updates. I've never seen the
message except in relation to Suspected Spyware reports.

--

 

[DZ]

Lets call it "agent", you know that free downloads carry
them. Anyway I tried your suggestion but it did not work.
The only thing that remains is to reformat and start all
over again. I'll wait though for sometime, I'm sure there
will be more such reports and may be one of these
anti-spywares will take a serious look at it. Thanks for
your time.
DZ

 

[plun]

Hi

About Google Earth this is a "ghost" for you.

I don´t believe a format is needed, let a HijackThis
specialist examine your system.

Freely choose within these excellent forums:

http://www.merijn.org/forums.html

 

[Bill Sanderson]

Me too....
(and I was gonna post the roof of my house, but it turns out the video on
this desktop isn't up to it. The laptop is, though--maybe later..)

--