Solved

Maleware affecting proxy settings

Posted on 2014-10-27
12
278 Views
Last Modified: 2014-11-07
I have malware on my computer (not sure if that is the correct terminology) that is not allowing me to change my proxie settings. All of my internet browsers (chrome, IE, firefox) will not go online because of a "Proxy issue" When I go in and change the Proxy settings, it atomatically switches back. Outlook works just fine, just the browsers that don't.

I have run a McCafee full computer scan, also a scan using "Malwarebytes Anti-Malware". Neither could find the problem.

Any ideas? THanks!
0
Comment
Question by:cansevin
  • 6
  • 6
12 Comments
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406314
Hi,

most of antivirus programms don`t find this malware/trojaner. Have a look for "adwcleaner von xplode", this tool works great for malware.
No installation, just run exe file. I use it once a month to check the systems.
Be aware to use a safe side for download this tool.

check also the all startup software with msconfig, unmark all you can not indentify,

Regards Ronald
0
 

Author Comment

by:cansevin
ID: 40406326
Thanks! I found something called AdwCleaner 3.311

Is that the correct program to run? I appreciate your help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406342
i have a newer version 4.001, but your version would help as well
0
 

Author Comment

by:cansevin
ID: 40406380
Thanks Ronard... found the 4.001 version and am running it now. Hope it works!!! Thanks for the help so far.
0
 

Author Comment

by:cansevin
ID: 40406407
It is currently running the scan. It has been stuck for the past 30 min. It is in "Analyzing Browsers", almost to the end. Literally hasn't moved in over 30 min. Should I be concerned?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406651
Hi, sorry i was out of office for a while. How it works ? Can you resolve the problem ?
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:cansevin
ID: 40406663
No... having really tough time. I have also ran TDSkiller and Malwarebytes. Nothing seems to be finding the problem.

Any other idea you can suggest?

Thanks for the help! I also started another tread which seams to be getting very little help. Anything you can provide would help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406680
I don`t understand, the tool normally find all malware/trojaner.
Did the tool show any information  for software in the information field ?

Did you check system by run "msconfig.exe" ? Under "startup" you can unmark programms.
Try with minimal startup configuration.

Or try start pc in safe mode and repeat the scan with adwcleaner
0
 

Author Comment

by:cansevin
ID: 40406852
I tried in safemode and same thing happened.

Is there any chance I don't have malware, it is just my settings? Here are my symptoms:

1.) All my web browsers say "unable to connect to proxy settings"
2.) When I try to change the proxy setting and uncheck the "Use a proxy servier for your LAN" It allows me to change it, but then when I click back in it, they are changed right back.

In the Advanced Proxy setting it has an HTTP and Secure that I can't change, they are:

Http: 127.0.0.1 with port of: 49585
Secure: 127.0.0.1 with port of: 49585

the bottom of the proxy advanced setting is "Do not use proxy server for addresses beginning with:

<-loopback>

Not sure if that matters at all.
0
 

Author Comment

by:cansevin
ID: 40407023
I have no idea how... but I think I fixed it!!! I went into safe mode and change my proxy settings from there. I then went into the regular mode and they stayed changed!!!

Would you have any idea what the reason for this is? Does this mean I have a virus of some sort?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40407827
check your host and lmhostfile, may 127.0.0.1 refer to a different page
0
 
LVL 2

Accepted Solution

by:
Ronald Schlageter earned 500 total points
ID: 40407828
should almost refer to localhost, try adwcleaner again, there is a new version since yesterday evening
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Internet is a big network which is formed by connecting multiple small networks.It is a platform for all the users which are connected to it.Internet act as platform in different fields. Such as: Internet  as a collaboration platform. Internet  as…
I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now