Gribby Posted May 21, 2014 ID:832480 Share Posted May 21, 2014 Having issues with pop-ups. Figured out the proxy is being forced to IP 127.0.0.1 from the registry. Thanks in advance for the help. Addition.txtFRST.txt Link to post Share on other sites More sharing options...
Staff Dashke Posted May 23, 2014 Staff ID:833273 Share Posted May 23, 2014 Hello Gribby! Can you please try to reset your IE settings -http://support.microsoft.com/kb/923737? Also, please download Tigzy's RogueKiller:http://www.bleepingcomputer.com/download/roguekiller/ Quit all programs that you may have started. Please disconnect any USB or external storage drives from the computer before you run this scan! For Vista or Windows 7 / 8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run. For Windows XP, double-click to start. When prompted to accept the EULA, please do so. Wait until Prescan has finished ... <<----- Then Click on Scan button at upper right of screen. Wait until the Status box shows "Scan Finished" Attach the log into your next reply. The log should be found in RKreport[1].txt on your Desktop Do NOT press any Fix button. Exit/Close RogueKiller Link to post Share on other sites More sharing options...
Gribby Posted May 23, 2014 Author ID:833289 Share Posted May 23, 2014 Thanks Daske: Reset IE complete. RKreport0_S_05222014_220255.txt Link to post Share on other sites More sharing options...
Staff Dashke Posted May 23, 2014 Staff ID:833400 Share Posted May 23, 2014 Hi Gribby, Have you turned UAC off on purpose? If yes, then please select these entries and click "Delete" -[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (hxxp=127.0.0.1:8118;hxxps=127.0.0.1:8118 [Country: (Private Address) (XX), City: (Private Address)]) -> FOUND[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> FOUND If no, please select all entries and click "Delete". Please let me know if that helps. Link to post Share on other sites More sharing options...
Gribby Posted May 23, 2014 Author ID:833686 Share Posted May 23, 2014 I don't recall turning UAC off, and certainly have no reason to. By delete all entries, can you confirm you mean the 4 entries listed in the RKreport are to be deleted from the Internet Settings in the registry? Link to post Share on other sites More sharing options...
Gribby Posted May 24, 2014 Author ID:833732 Share Posted May 24, 2014 I removed the registry items, and the problem persists. Link to post Share on other sites More sharing options...
Staff Dashke Posted May 24, 2014 Staff ID:833844 Share Posted May 24, 2014 Hi Gribby, I'll need to gather more information to locate the source of the issue.Please download the Farbar Recovery Scan Tool from here: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ save it to your desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach that log to your reply. The first time the tool is run, it makes a second log (Addition.txt). Please attach that to your reply as well Link to post Share on other sites More sharing options...
Gribby Posted May 24, 2014 Author ID:833962 Share Posted May 24, 2014 Here you go, thanks for the continued support. Addition.txtFRST.txt Link to post Share on other sites More sharing options...
Staff Dashke Posted May 26, 2014 Staff ID:834391 Share Posted May 26, 2014 Hi Gribby, Never install more than one Antivirus and Firewall. Rather than giving you extra protection, it will decrease the reliability of it seriously. The reason for this is that if both products have their automatic (Real-Time) protection switched on, your system may lock up due to both software products attempting to access the same file at the same time. Also because more than one Antivirus and Firewall installed are not compatible with each other, it can cause system performance problems and a serious system slowdown. Please uninstall TrendMicro and Avast at this point. Please download attached fixlist.txt and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the Fix button just once, and wait.•If you receive a message that a reboot is required, please make sure you allow it to restart normally.•The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. fixlist.txt Link to post Share on other sites More sharing options...
Gribby Posted May 26, 2014 Author ID:834574 Share Posted May 26, 2014 Thanks. The Trend Micro Systems, came with the PC,I never installed. I guess it is part of the packaged bloatware. Fixlog attached.Fixlog.txt Link to post Share on other sites More sharing options...
Staff Dashke Posted May 27, 2014 Staff ID:834744 Share Posted May 27, 2014 Hi Gribby, Thank you for the log! Can you please try to run RogueKiller one more time and attach the log here? Link to post Share on other sites More sharing options...
Gribby Posted May 28, 2014 Author ID:835025 Share Posted May 28, 2014 Thanks, the proxy is not being reset. Great progress. Thanks. RKreport0_S_05272014_214012.txt Link to post Share on other sites More sharing options...
Staff Dashke Posted May 28, 2014 Staff ID:835145 Share Posted May 28, 2014 That's great news! You can now remove all these tools we used.Can I help you with anything else? Link to post Share on other sites More sharing options...
Gribby Posted May 28, 2014 Author ID:835429 Share Posted May 28, 2014 No thank you, Thanks so much!!!! Link to post Share on other sites More sharing options...
Staff Dashke Posted May 30, 2014 Staff ID:836049 Share Posted May 30, 2014 You are always welcome! Please let us know if you need anything in the future, we will gladly help you! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 14, 2014 Root Admin ID:852589 Share Posted July 14, 2014 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts