?
Solved

Maleware affecting proxy settings

Posted on 2014-10-27
12
Medium Priority
?
284 Views
Last Modified: 2014-11-07
I have malware on my computer (not sure if that is the correct terminology) that is not allowing me to change my proxie settings. All of my internet browsers (chrome, IE, firefox) will not go online because of a "Proxy issue" When I go in and change the Proxy settings, it atomatically switches back. Outlook works just fine, just the browsers that don't.

I have run a McCafee full computer scan, also a scan using "Malwarebytes Anti-Malware". Neither could find the problem.

Any ideas? THanks!
0
Comment
Question by:cansevin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
12 Comments
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406314
Hi,

most of antivirus programms don`t find this malware/trojaner. Have a look for "adwcleaner von xplode", this tool works great for malware.
No installation, just run exe file. I use it once a month to check the systems.
Be aware to use a safe side for download this tool.

check also the all startup software with msconfig, unmark all you can not indentify,

Regards Ronald
0
 

Author Comment

by:cansevin
ID: 40406326
Thanks! I found something called AdwCleaner 3.311

Is that the correct program to run? I appreciate your help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406342
i have a newer version 4.001, but your version would help as well
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 

Author Comment

by:cansevin
ID: 40406380
Thanks Ronard... found the 4.001 version and am running it now. Hope it works!!! Thanks for the help so far.
0
 

Author Comment

by:cansevin
ID: 40406407
It is currently running the scan. It has been stuck for the past 30 min. It is in "Analyzing Browsers", almost to the end. Literally hasn't moved in over 30 min. Should I be concerned?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406651
Hi, sorry i was out of office for a while. How it works ? Can you resolve the problem ?
0
 

Author Comment

by:cansevin
ID: 40406663
No... having really tough time. I have also ran TDSkiller and Malwarebytes. Nothing seems to be finding the problem.

Any other idea you can suggest?

Thanks for the help! I also started another tread which seams to be getting very little help. Anything you can provide would help!
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40406680
I don`t understand, the tool normally find all malware/trojaner.
Did the tool show any information  for software in the information field ?

Did you check system by run "msconfig.exe" ? Under "startup" you can unmark programms.
Try with minimal startup configuration.

Or try start pc in safe mode and repeat the scan with adwcleaner
0
 

Author Comment

by:cansevin
ID: 40406852
I tried in safemode and same thing happened.

Is there any chance I don't have malware, it is just my settings? Here are my symptoms:

1.) All my web browsers say "unable to connect to proxy settings"
2.) When I try to change the proxy setting and uncheck the "Use a proxy servier for your LAN" It allows me to change it, but then when I click back in it, they are changed right back.

In the Advanced Proxy setting it has an HTTP and Secure that I can't change, they are:

Http: 127.0.0.1 with port of: 49585
Secure: 127.0.0.1 with port of: 49585

the bottom of the proxy advanced setting is "Do not use proxy server for addresses beginning with:

<-loopback>

Not sure if that matters at all.
0
 

Author Comment

by:cansevin
ID: 40407023
I have no idea how... but I think I fixed it!!! I went into safe mode and change my proxy settings from there. I then went into the regular mode and they stayed changed!!!

Would you have any idea what the reason for this is? Does this mean I have a virus of some sort?
0
 
LVL 2

Expert Comment

by:Ronald Schlageter
ID: 40407827
check your host and lmhostfile, may 127.0.0.1 refer to a different page
0
 
LVL 2

Accepted Solution

by:
Ronald Schlageter earned 2000 total points
ID: 40407828
should almost refer to localhost, try adwcleaner again, there is a new version since yesterday evening
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question