Solved

Maleware affecting proxy settings

Posted on 2014-10-27
12
283 Views
Last Modified: 2014-11-07
I have malware on my computer (not sure if that is the correct terminology) that is not allowing me to change my proxie settings. All of my internet browsers (chrome, IE, firefox) will not go online because of a "Proxy issue" When I go in and change the Proxy settings, it atomatically switches back. Outlook works just fine, just the browsers that don't.

I have run a McCafee full computer scan, also a scan using "Malwarebytes Anti-Malware". Neither could find the problem.

Any ideas? THanks!
0
Comment
Question by:cansevin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
12 Comments
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406314
Hi,

most of antivirus programms don`t find this malware/trojaner. Have a look for "adwcleaner von xplode", this tool works great for malware.
No installation, just run exe file. I use it once a month to check the systems.
Be aware to use a safe side for download this tool.

check also the all startup software with msconfig, unmark all you can not indentify,

Regards Ronald
0
 

Author Comment

by:cansevin
ID: 40406326
Thanks! I found something called AdwCleaner 3.311

Is that the correct program to run? I appreciate your help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406342
i have a newer version 4.001, but your version would help as well
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:cansevin
ID: 40406380
Thanks Ronard... found the 4.001 version and am running it now. Hope it works!!! Thanks for the help so far.
0
 

Author Comment

by:cansevin
ID: 40406407
It is currently running the scan. It has been stuck for the past 30 min. It is in "Analyzing Browsers", almost to the end. Literally hasn't moved in over 30 min. Should I be concerned?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406651
Hi, sorry i was out of office for a while. How it works ? Can you resolve the problem ?
0
 

Author Comment

by:cansevin
ID: 40406663
No... having really tough time. I have also ran TDSkiller and Malwarebytes. Nothing seems to be finding the problem.

Any other idea you can suggest?

Thanks for the help! I also started another tread which seams to be getting very little help. Anything you can provide would help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406680
I don`t understand, the tool normally find all malware/trojaner.
Did the tool show any information  for software in the information field ?

Did you check system by run "msconfig.exe" ? Under "startup" you can unmark programms.
Try with minimal startup configuration.

Or try start pc in safe mode and repeat the scan with adwcleaner
0
 

Author Comment

by:cansevin
ID: 40406852
I tried in safemode and same thing happened.

Is there any chance I don't have malware, it is just my settings? Here are my symptoms:

1.) All my web browsers say "unable to connect to proxy settings"
2.) When I try to change the proxy setting and uncheck the "Use a proxy servier for your LAN" It allows me to change it, but then when I click back in it, they are changed right back.

In the Advanced Proxy setting it has an HTTP and Secure that I can't change, they are:

Http: 127.0.0.1 with port of: 49585
Secure: 127.0.0.1 with port of: 49585

the bottom of the proxy advanced setting is "Do not use proxy server for addresses beginning with:

<-loopback>

Not sure if that matters at all.
0
 

Author Comment

by:cansevin
ID: 40407023
I have no idea how... but I think I fixed it!!! I went into safe mode and change my proxy settings from there. I then went into the regular mode and they stayed changed!!!

Would you have any idea what the reason for this is? Does this mean I have a virus of some sort?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40407827
check your host and lmhostfile, may 127.0.0.1 refer to a different page
0
 
LVL 2

Accepted Solution

by:
Ronald Schlageter earned 500 total points
ID: 40407828
should almost refer to localhost, try adwcleaner again, there is a new version since yesterday evening
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
This article investigates the question of whether a computer can really be cleaned once it has been infected, and what the best ways of cleaning a computer might be (in this author's opinion).
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question