Pum.bad.proxy returns after cleaning

[compcore]

Hello,

 

     I have a infected computer with pum.bad.proxy and malware bytes removes but it returns after restart.  Any help would be greatly appreciated.

 

Thanks.

[Firefox]

Hello and Welcome to Malwarebytes

Can you please post your last scan log so we can see what was detected?

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

[compcore]

Here is a fresh run log.

mbam-log-2014-03-18 (15-08-31).txt

[Firefox]

Thanks for the log... I see that you did mark it for deletion... did it ask you to reboot after the cleanup? After a reboot I assume you rescanned and it once again was redetected?

Registry Values Detected: 1HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Data: http=127.0.0.1:13828 -> Quarantined and deleted successfully.

[compcore]

No it did not ask me to reboot and I haven't run a subsequent scan.  Although I have ran it several times and it always returns.

[Firefox]

Well if it keeps coming back, then there is probably a deeper infection that is causing the entry to come back...

I would suggest having an expert help you check the computer out....

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you