Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

LAN settings proxy server being set to 127.0.0.1


  • Please log in to reply
3 replies to this topic

#1 HairCut

HairCut

  • Members
  • 235 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:11:19 PM

Posted 08 June 2014 - 04:40 AM

HI all,

Having just spent several hours trying to prevent the LAN proxy server being set by some nefarious program I thought I should record the solution and the culprit. The OS is Windows 7.

 

The culprit was connected to an IE toolbar called easyfundraising toolbar.

 

It had been disabled **and did not appear in the (add)remove programs list, yet it was still able to enable and change the LAN proxy settings on every boot and sometimes after a few minutes.

 

This setting prevented the Mcafee technical support connecting remotely to the computer according to computer user. I've no idea if this was a legitimate tech support arrangement.

 

After multiple scans by numerous anti virus and specialist security software in safe mode and in normal boot.

After using ccleaner and msconfig to selectively prevent many start-up programs.

After following advice on tech websites including this one and at Microsoft regarding this LAN proxy being set problem.

 

 

I closely looked again at IE's list of Add Ons all of which had been previously disabled.

This was listed:

TBSB03575 Class

 

It was disabled which led me to believe that it was inactive but some program connected with it (judging by the solution) was setting and resetting the LAN proxy.

 

Clicking 'more information' in IE 'manage add-ons' dialogue revealed this:

 

Name:                   TBSB03575 Class
Publisher:              Not Available
Type:                   Browser Helper Object
Architecture:           32-bit
Version:                Not available
File date:              Not available
Date last accessed:     ?07 ?June ?2014, ??22:59
Class ID:               {BF942B3C-B33B-465F-A3C1-2A597658B2A5}
Use count:              0
Block count:            35
File:                   tbcore3.dll
Folder:                 C:\Program Files (x86)\easyfundraising toolbar

 

Solution:

 

Deleted the folder: C:\Program Files (x86)\easyfundraising toolbar

Used Regedit to search for the Class ID and deleted the key.

 

**It was included in the programs list under the name: Find and Remind and publisher: easyfundraiser.org.uk I was under the  impression that I'd removed it but clearly the bad part remained.


Edited by HairCut, 08 June 2014 - 07:44 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,098 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:19 PM

Posted 08 June 2014 - 03:16 PM

Good investigative work. Is everything working ok now?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 HairCut

HairCut
  • Topic Starter

  • Members
  • 235 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:11:19 PM

Posted 08 June 2014 - 05:38 PM

Thanks. All seems to be well with the computer now.



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,098 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:19 PM

Posted 08 June 2014 - 05:41 PM

:thumbup2:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users