I just finished cleaning a PC with a virus and found that Combofix (and HijackThis) missed a proxy server setting that HitmanPro found. When I looked on the PC in Internet Settings, Proxy Settings it didn't show any proxy either. So Im not sure how to notify the ComboFix folks incase they wish to look at it. Here is a RegKey export of the keys combofix missed.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000001
"ProxyServer"="http=127.0.0.1:50370"
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"GlobalUserOffline"=dword:00000000
Maybe its not something Combofix does but I thought I would try and report it.
Thanks
Jim
This post has been edited by boopme: 20 July 2011 - 09:34 AM
Reason for edit: Moved to appropriate forum

Help

Back to top








