Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Proxy Settings keep changing


  • Please log in to reply
5 replies to this topic

#1 duality-divinity

duality-divinity

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 19 January 2015 - 07:25 PM

I am running Windows 8 with two user profiles. Today my Internet explorer (the weird full-screen version accessed from the Start screen) started displaying this message:

"The Proxy Server isn't Responding

Check your proxy settings 127.0.0.1:49326"

 

My regular IE on the desktop seems to work fine, and my other user account on the same computer appears to be completely unaffected.

 

When I access my proxy settings, Manual proxy setup is enabled, even though I have never enabled it. When I change to Automatic proxy setup and disable Manual proxy setup, close out of the PC settings window, and reopen it, the settings have been reverted.

 

I found a program called storm watch that was installed on the PC yesterday and removed it with MBAM

 

There is also something in my programs and features list called UpdateAdmin, which was installed yesterday, but it wasn't detected in my MBAM scan, and when I attempt to uninstall it, a window pops up requesting permission for the following program:

 

C:\WINDOWS\Installer\7c8e51b.msi

Publisher: Unknown

 

to make changes to my computer. I am unsure of the consequences if I allow, so I have not uninstalled this unknown program.

 

What can I do now?

 



BC AdBot (Login to Remove)

 


m

#2 Phantom010

Phantom010

  • Members
  • 944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:00 PM

Posted 19 January 2015 - 08:13 PM

Please download AdwCleaner.

  • Double-click the adwcleaner.exe to run the tool.
  • Click Scan.
  • When the scan is finished, click Clean.
  • When the cleaning process is over, click Report and a Notepad window will be opened.
  • Please post the contents in your next reply.


Please stick around after posting. Helpers are never far. Don't disappear for a week!
Our help is free, so please have the courtesy to reply in a timely manner. Thank you!


#3 duality-divinity

duality-divinity
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 20 January 2015 - 05:00 PM

Thank you, Phantom, I appreciate your help!

 

 

# AdwCleaner v4.108 - Report created 20/01/2015 at 15:53:09
# Updated 17/01/2015 by Xplode
# Database : 2015-01-18.1 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : Joe - BACHENHAUERS
# Running from : C:\Users\Joe\AppData\Local\Microsoft\Windows\INetCache\IE\NBXW3NMU\adwcleaner_4.108.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UpdateAdmin
Folder Deleted : C:\Program Files (x86)\NCH Software
Folder Deleted : C:\Users\cbach_000\AppData\Local\GeniusBox
Folder Deleted : C:\Users\cbach_000\AppData\Local\UpdateAdmin
Folder Deleted : C:\Users\cbach_000\AppData\LocalLow\AVG SafeGuard toolbar
Folder Deleted : C:\Users\Joe\AppData\Roaming\NCH Software
Folder Deleted : C:\Users\Joe\AppData\Roaming\UpdaterEX
Folder Deleted : C:\Users\cbach_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc
Folder Deleted : C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc

***** [ Scheduled Tasks ] *****

Task Deleted : UpdaterEX

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\UpdaterEX
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\StormWatch
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\nym1.ib.adnxs.com

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Mozilla Firefox v29.0 (en-US)

-\\ Google Chrome v39.0.2171.99

[C:\Users\cbach_000\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\cbach_000\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [4504 octets] - [20/01/2015 15:49:04]
AdwCleaner[S0].txt - [4036 octets] - [20/01/2015 15:53:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4096 octets] ##########



#4 Phantom010

Phantom010

  • Members
  • 944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:00 PM

Posted 20 January 2015 - 06:23 PM

How are the proxy settings?

Please stick around after posting. Helpers are never far. Don't disappear for a week!
Our help is free, so please have the courtesy to reply in a timely manner. Thank you!


#5 duality-divinity

duality-divinity
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 22 January 2015 - 03:36 PM

My proxy settings seem to be functioning normally now, haven't had any issues.

 

However, a RunDll window keeps popping up on the desktop of the affected user account saying:

 

"There was a problem starting

C:\Users\CBACH_~1\AppData\Local\ARCADE~1\AgHelp.dll

 

The specified module could not be found."

 

 

Doesn't seem to be affecting the functionality of any programs, and I'm not sure if it really matters, but it is a bit of a nuisance.



#6 Phantom010

Phantom010

  • Members
  • 944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:00 PM

Posted 22 January 2015 - 03:40 PM

However, a RunDll window keeps popping up on the desktop of the affected user account saying:

 

"There was a problem starting

C:\Users\CBACH_~1\AppData\Local\ARCADE~1\AgHelp.dll

 

The specified module could not be found."

 

 

Doesn't seem to be affecting the functionality of any programs, and I'm not sure if it really matters, but it is a bit of a nuisance.

 

Have a look HERE for a similar problem and troubleshooting steps.



Please stick around after posting. Helpers are never far. Don't disappear for a week!
Our help is free, so please have the courtesy to reply in a timely manner. Thank you!





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users