Spyware Report Proxy error? Raw report BUG

R

Rich-Illinois

Sorry if I should have posted first here rather than
General, since it's more a network-related problem, but:
Always have a couple new spyware entries installed after
each scan, telling me that although "IST" has
been "removed" by MS-AS, something is still loading more.
Two processes, randomly named "mnfogvzh.exe"
and "galwlhfn.exe" are running now, and NOT (yet)
identified as spyware, though a google search turns up NO
hits...so they gotta be malware, located in
c:\windows\system32.
Suspect report attempts always come back with a
network/connection error:
"An error occurred submitting the scan results. Please
check you(sic) Internet proxy settings and try again."
There is NO proxy. We are on a LAN with DSL direct access
through a router, which may be a firewall issue but there
is no IT person to look into that (installed by the ISP
years ago).

Also, I thought to view the "Raw" scan report and try to
find somewhere at Microsoft to email it to...no luck.
Clicking on this does nothing. No report, raw or
otherwise, is opened.
 
R

Ron Kinner

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam. I'll help you get rid of your
bugs.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)
 
S

Steve Wechsler [MVP]

Kill the Processes using Task Manager (also check MSConfig to make sure
that they're not reloaded on Startup) and then do a Full system scan,
with all 3 boxes checked, with MSAS.
Have successfully removed "IST" on several systems with MSAS. Unless
you're dealing with a newer variant, you *should* be able to remove it.
Try a scan in Safe Mode after doing a Full system scan in normal Windows
mode if it's persistent.

Steve Wechsler (akaMowGreen)
MS-MVP 2004-2005

===============
*-343-* FDNY
Never Forgotten
===============
 
B

Bill Sanderson

Steve Dodson has mentioned that he has additional tips for resistant ISTBar
sufferers.

If this isn't going away after cleaning with Microsoft Antispyware, send
email to

(e-mail address removed)

with ISTBAR in the subject header.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Cannot submit report 21
Suspected Spyware Reports Not Getting Out 3
Internet Proxy 2
Cannot send Report 2
Spyware report failure 1
Submit report 1
Bug report 1
Unable to submit suspected spyware report 4

Top