PUM.bad.proxy

[Rawr]

Registry Values Infected:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Quarantined and deleted successfully.

Detected this about 30 minutes ago. Peeked around on google and came back with nada. Can't really find anything wrong with Avira, and multiple MBAM scans reported nothing else.

Anyone have any idea what this is, if I should be checking on other things, or should I be worried?

Thanks.

[Tysal]

Registry Values Infected:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Quarantined and deleted successfully.

I also have this. I find it only with Full Scan. When I restart it returns.

I thought is was releated to Search Results Redirects, but removing it did not fix that problem.

[Wide_Glide]

Hello Rawr and Tysal

Please try the following:

• 
  
• Open Internet Explorer
  
• Note: It MUST be Internet Explorer, not Firefox, Opera, Chrome or any other internet browser
  
• Click on Tools at the top and select Internet Options
  
• Note: If you do not see Tools, press the Alt key on your keyboard and it will show up
  
• Click on the Connections tab
  
• Click on the LAN settings button
  
• Under Automatic configuration make sure that the box next to Automatically detect settings is checked, if it is not, then click the box next to it to check it
  
• Click on the OK button to close the Local Area Network (LAN) Settings window
  
• Click on the OK button to close the Internet Options window
  
• Use this diagram as a guide
  

If this does not resolve your issue then please do the following

Please print out, read and follow the Directions Here, skipping any steps you are unable to complete. Then post a NEW Topic Here

One of the Expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help. If no one has replied within 48 hours then please go ahead and either reply to your post or send a private message to a Moderator and let them know that you're still needing assistance.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options(Immediate Email Notification) so that you're alerted when someone has replied to your post.

Email Notification of new messages

Also, when replying, please use the ADDREPLY button located at the bottom of the page, as this makes the forum easier to read.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or HERE

[kamslm]

Hi folks. Dont know if this thread is still active but MWB picked up this virus and quarantined it. It affects my Firefox. You must manually change proxy settings each time you open Firefox by entering Tools, Options, Advanced, Network, Settings, and deselect Manual Proxy Settings and select No Proxy (at least for my cable internet provider). In the Manual Proxy Settings box it redirects to your own computer 127.0.0.1 and a random Port selection.

MWB got rid of the bad registry setting: Hkey_Current User\Software\Microsoft\Windows\Current Version\Internet Settings\Proxy Server. It deleted the "Proxy Server" portion from this key.

But it still defaults to Manual Proxy Settings at 127.0.0.1 each time Firefox is opened.

Any fix for Firefox users??