Over 1 million tech questions and answers.

proxy settings stuck 127.0.0.1:8800 & cannot connect to internet

Q: proxy settings stuck 127.0.0.1:8800 & cannot connect to internet

Hi,
after using malwarebytes anti malware to quarantine threats, I am now unable to connect to internet, however my wifi itself is connected full bars. Kindly assist, I have seen a number of people on the forum who had the same issue resolved but I understand that the problem may be unique to the type of device. I have a Lenovo x1 carbon, windows 7. thanks in advance

RELEVANCY SCORE 200
Preferred Solution: proxy settings stuck 127.0.0.1:8800 & cannot connect to internet

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: proxy settings stuck 127.0.0.1:8800 & cannot connect to internet

below are logs from running FRST64
Kindly assist............my out of my wits on this
 
ADDITION
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-11-2014
Ran by Pesh at 2014-11-18 19:53:33
Running from C:\Users\Pesh\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Norton Internet Security (Disabled - Out of date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Disabled - Out of date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
BlackBerry Link (HKLM-x32\...\BlackBerry_10_Desktop) (Version: 1.2.3.56 - BlackBerry Ltd.)
BlackBerry Link (x32 Version: 1.2.3.56 - BlackBerry Ltd.) Hidden
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7/8 (HKLM\...\DisableAMTPopup) (Version: 1.00 - )
DisplayLink Core Software (HKLM\...\{BB07E020-7224-4EC3-864E-2AA0BF42A7DD}) (Version: 7.4.51572.0 - DisplayLink Corp.)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Dragon Assistant version 1.5.14 (HKLM-x32\...\{D57A8269-3BE5-4D10-B882-64D0F2D448BF}_is1) (Version: 1.5.14 - Nuance Communications, Inc.)
Gesture Control (HKLM-x32\...\{5BD1491C-A955-44E1-ACC6-8AF7DFE41989}) (Version: 4.0.116.4 - Lenovo)
Inst5676 (Version: 8.01.18 - Softex Inc.) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.22.1760 - Intel Corporation)
Intel® Network Connections Drivers (HKLM\...\PROSet) (Version: 19.0 - Intel)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology(patch version 3.0.1342.2) (HKLM\...\{302600C1-6BDF-4FD1-1311-148929CC1385}) (Version: 3.1.1311.0402 - Intel Corporation)
Intel® Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.1.28 - Intel Corporation)
Intel® WiDi (HKLM\...\{F949AE30-83D1-41B2-92D2-F44478DD058A}) (Version: 4.2.24.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{6e8d4676-a513-4f5b-9b52-6deb7bdc94f0}) (Version: 16.8.0 - Intel Corporation)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.11 - )
Lenovo Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.1.9.0 - Lenovo)
Lenovo Fingerprint Manager Pro (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.18(x64) - Lenovo)
Lenovo Fingerprint Manager Pro (Version: 8.01.18(x64) - Lenovo) Hidden
Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Peer Connect SDK (HKLM\...\{75C87855-9CBB-4892-B1A9-74C73A19CACA}_is1) (Version: 1.0.0.4 - Lenovo)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.05 - )
Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 2.10 - Lenovo Group Limited)
Lenovo QuickDisplay (HKLM\...\{ADEEC90C-A033-4596-ACA1-97327055F9CB}) (Version: 1.2.6.0 - Lenovo Group Limited)
Lenovo Reach (HKLM-x32\...\{3245D8C8-7FE0-4FD4-B04B-2720A333D592}) (Version: 1.1.3.7 - Stoneware, Inc.)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.3 - Lenovo Inc.)
Lenovo SHAREit (HKLM-x32\...\Lenovo SHAREit_is1) (Version: 1.0.11.0 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{13BD494D-9ACD-420B-A291-E145DED92EF6}) (Version: 2.6.001.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.06.0016 - Lenovo)
Lenovo USB Graphics (HKLM\...\{7257526E-B74A-488E-BA2E-56327482B06B}) (Version: 7.4.51587.0 - Lenovo)
Lenovo USB3.0 to DVI VGA Monitor Adapter (HKLM-x32\...\{454D32AD-C149-49BE-9F2E-8C089C3D6620}) (Version: 1.07.15 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo)
Message Center Plus (HKLM\...\{3849486C-FF09-4F5D-B491-3E179D58EE15}) (Version: 3.1.0004.00 - Lenovo Group Limited)
Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2290190785-3451889800-4021786315-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Multifactor Authentication Client (HKLM\...\{89F955AF-7274-4C60-B5ED-3530AFB88163}) (Version: 1.3.2.3008 - Nok Nok Labs)
Nitro Pro 9 (HKLM\...\{356896F4-F148-4BEB-8268-7D877F6C0DD0}) (Version: 9.0.6.20 - Nitro)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)
Nuance Speech Component DA-A en-US version 1.5.15 (HKLM-x32\...\{1CCBE73F-4948-4711-8D12-22E2FD65D706}_is1) (Version: 1.5.15 - Nuance Communications, Inc.)
Nuance Speech Component DA-C version 1.1.17 (HKLM-x32\...\{E97BA7A6-46FC-4EBF-B24A-B8362948C696}_is1) (Version: 1.1.17 - Nuance Communications, Inc.)
Nuance Speech Component DA-L en-US version 1.1.5 (HKLM-x32\...\{4C0C1E4E-D3B1-4496-98EC-DA14D45EC855}_is1) (Version: 1.1.5 - Nuance Communications, Inc.)
On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.26.00 - )
Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.63.1 - Lenovo Group Limited)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7127 - Realtek Semiconductor Corp.)
Realtek PC Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10247 - Realtek Semiconductor Corp.)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (HKLM\...\EnablePS) (Version: 1.00 - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Synaptics WBF DDK 5011 (HKLM\...\{491728AE-BFF0-44F2-A9F1-9AE218E36E2D}) (Version: 4.5.263.0 - Synaptics)
Synaptics WBF DDK 5011 (HKLM\...\{4D70781C-36A9-4335-9568-565C6F61B5EB}) (Version: 4.5.263.0 - )
ThinkPad OneLink Dock (HKLM-x32\...\{8E1CACF5-2493-4950-9AD5-189903FE57E7}) (Version: 1.08.26 - Lenovo)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.7.34 - Synaptics Incorporated)
Thinkpad USB 3.0 Ethernet Adapter Driver (HKLM-x32\...\{D8102684-7BA1-4948-88B9-535F84E6E588}) (Version: 7.4.911.2013 - Lenovo)
USB Enhanced Performance Keyboard (HKLM\...\{989DC5D9-A776-430D-9E16-D36E5B81CD86}) (Version: 2.0.1.9 - Lenovo)
VitalSource Bookshelf (HKLM-x32\...\{63780788-b958-4383-a369-93f28a50cd8b}) (Version: 6.05.0033 - Ingram Content Group)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Driver Package - Intel (e1dexpress) Net  (07/12/2013 12.8.33.9427) (HKLM\...\E2F073CDE45B7E911CA2CAD8CFEFB9E6340491A9) (Version: 07/12/2013 12.8.33.9427 - Intel)
Windows Driver Package - Intel Corporation (iaStorA) HDC  (11/15/2013 12.8.10.1005) (HKLM\...\D25E6F494D3225DFE05884186452E2C79AF2E506) (Version: 11/15/2013 12.8.10.1005 - Intel Corporation)
Windows Driver Package - Lenovo 1.67.04.05 (12/17/2013 1.67.04.05) (HKLM\...\68ECF461D6E85BB67AFC110D2FEBF1955C9F26B5) (Version: 12/17/2013 1.67.04.05 - Lenovo)
Windows Driver Package - Synaptics (SmbDrv) System  (02/25/2014 18.0.7.34) (HKLM\...\BBCACF7AB7B74509B9506D886F8848A6F9948752) (Version: 02/25/2014 18.0.7.34 - Synaptics)
Windows Driver Package - Synaptics (SynTP) Mouse  (02/25/2014 18.0.7.34) (HKLM\...\8204BE335A7EB81A42BA39FE41BDB3301B14C2E5) (Version: 02/25/2014 18.0.7.34 - Synaptics)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2290190785-3451889800-4021786315-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Pesh\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2290190785-3451889800-4021786315-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Pesh\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2290190785-3451889800-4021786315-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Pesh\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2290190785-3451889800-4021786315-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Pesh\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2290190785-3451889800-4021786315-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Pesh\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points  =========================
31-10-2014 17:16:47 Scheduled Checkpoint
14-11-2014 17:28:12 Windows Update
14-11-2014 19:36:18 Installed BlackBerry Link.
14-11-2014 22:44:11 Windows Update
15-11-2014 19:42:39 Removed GeekBuddy.
15-11-2014 19:43:07 Removed GeekBuddy.
18-11-2014 23:41:06 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {08C9AEA6-0388-456E-BF4E-BA6A9C019467} - System32\Tasks\{4F80CDA5-4A0E-4005-892A-5CF15E765C5F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107.375/en/go/help.faq.installer?LastError=1618
Task: {0F883950-4E2F-413C-A39F-9028C7FA1EB5} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe
Task: {15F18420-EB05-4EE6-B322-7C528BD7E764} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-09-03] (Lenovo)
Task: {20782881-D8CC-43A3-9103-DD2B4F5AF427} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {2141FA4E-03CA-414B-93D4-4671B5787044} - System32\Tasks\DonutQuotes => C:\Program Files (x86)\donutleads\ScheduledTask.exe
Task: {21804993-38A4-4764-B3BD-190A4A636698} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: {30F926A3-57D2-4C3D-8666-0A3B71D06597} - System32\Tasks\TVT\Lenovo QuickDisplay Agent => C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe [2014-03-26] (Lenovo Corporation)
Task: {3D0282C7-3C07-44B4-9F1D-788795BED210} - System32\Tasks\TVT\LenovoWERMonitor => C:\Program Files (x86)\Common Files\lenovo\SUP\sup_wermonitor_shim.exe [2014-09-01] ()
Task: {3D8A3E27-5EB1-444B-BEE7-26B1224EFAC6} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2014-09-03] (Lenovo)
Task: {3F9B9FEA-23AB-47EA-9164-3EF316684B05} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {445B4911-32AE-4091-8984-51D0398C46AD} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo)
Task: {466146CB-4160-4B1A-9AF9-784B1FD022EE} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-15] (Lenovo)
Task: {4EA4D854-2037-4843-88BC-2FCA6FDA4475} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-04-26] (Lenovo)
Task: {6F3BF7C6-5E77-4552-80F7-82EF681B0EE0} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-12-27] (Realtek Semiconductor)
Task: {77C7358D-7AC1-4D91-8D24-B46BF7728C3D} - System32\Tasks\DiskUpdate => C:\SWTOOLS\OSFIXES\DISKUPDT\DiskUpdate.exe [2009-02-09] ()
Task: {7E85DD26-78E8-4F28-BBD5-EA632BEA90FF} - System32\Tasks\Lenovo\Gesture Control => C:\Program Files (x86)\eyeSight\Gesture Control\GestureControl.exe [2013-11-22] (Lenovo)
Task: {7F91049D-BC90-4C9D-8B3E-33ECC1D41FB1} - System32\Tasks\Nok Nok LabsMFACUpdaterTaskMachineCore => C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe [2014-10-07] (Nok Nok Labs Inc.)
Task: {834A9967-5133-4F88-904E-8E27333043EE} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-06-18] ()
Task: {856AD98F-49EA-468C-8854-C1074470B342} - System32\Tasks\Lenovo\LSC\LSCTaskService => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService.exe [2014-09-03] ()
Task: {860EB484-C55B-42C9-BDFB-6EE6EFFF0113} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {8F17CF10-0742-4AB9-8244-35317F97E4EB} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {9674E76E-DEC5-46DB-9794-807FDECA52FB} - System32\Tasks\OUG => C:\Users\Pesh\AppData\Roaming\OUG.exe <==== ATTENTION
Task: {9CFEB4ED-B1D1-4BB1-A80B-D16FD7BB7E01} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-12-19] (Realtek Semiconductor)
Task: {9FD1F8C9-0B3F-4E11-8759-005B1F52D47B} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe [2013-09-02] (Lenovo Group Limited)
Task: {A65AC4D9-2D7F-4B35-9976-4E77E4D062AE} - System32\Tasks\Nok Nok LabsMFACUpdaterTaskMachineUA => C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe [2014-10-07] (Nok Nok Labs Inc.)
Task: {D5C4935E-E066-49E5-ACC5-B72E67F59197} - System32\Tasks\RtHDVBg_LENOVO_MICPKEY => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-12-27] (Realtek Semiconductor)
Task: {D61C4D5C-BE18-4A29-8541-2A7BA18A2F47} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-10-07] (Microsoft Corporation)
Task: {D93AD1B7-530C-41D2-9989-05B2DB219EA0} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-09-03] ()
Task: {EA242575-7AEC-49F7-87D0-31645610B35B} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {F8F4A249-C9E8-48C6-A963-E0E318DAB1A9} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {FEAD404C-F819-4C45-A162-C3E26A1DC9C5} - System32\Tasks\RGZTMXQV => C:\Users\Pesh\AppData\Roaming\RGZTMXQV.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Nok Nok LabsMFACUpdaterTaskMachineCore.job => C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe
Task: C:\Windows\Tasks\Nok Nok LabsMFACUpdaterTaskMachineUA.job => C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe
Task: C:\Windows\Tasks\OUG.job => C:\Users\Pesh\AppData\Roaming\OUG.exe <==== ATTENTION
Task: C:\Windows\Tasks\RGZTMXQV.job => C:\Users\Pesh\AppData\Roaming\RGZTMXQV.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-06-25 12:35 - 2014-06-25 12:35 - 00035328 _____ () C:\Program Files\Lenovo\Fingerprint Manager Pro\ssplogon.dll
2014-06-25 12:35 - 2014-06-25 12:35 - 00055296 _____ () C:\Program Files\Lenovo\Fingerprint Manager Pro\RandomPass.dll
2014-06-25 12:35 - 2014-06-25 12:35 - 00021504 _____ () C:\Program Files\Lenovo\Fingerprint Manager Pro\cryptodll.dll
2014-06-25 12:49 - 2014-06-25 12:49 - 00288656 _____ () C:\Program Files\Lenovo\Fingerprint Manager Pro\mstrpwd.dll
2014-10-30 16:27 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-08-19 05:38 - 2013-11-22 01:26 - 00113096 _____ () C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
2014-11-15 13:39 - 2014-11-03 13:56 - 04377560 ___SH () C:\Program Files (x86)\Ubmobraimationsmomy\Ubmobraimationsmomy.exe
2014-11-15 13:39 - 2014-11-15 13:39 - 00160728 ____R () C:\Program Files (x86)\Ubmobraimationsmomy\UbmobraimationsmomyHelper.exe
2014-06-25 12:41 - 2014-06-25 12:41 - 00065024 _____ () C:\Program Files\Lenovo\Fingerprint Manager Pro\opvapp.exe
2014-08-19 05:41 - 2013-09-02 17:03 - 00104448 ____N () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.DLL
2014-08-19 05:33 - 2013-11-13 19:48 - 00915968 ____N () C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe
2014-08-19 05:37 - 2013-10-01 04:09 - 00078880 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
2014-08-19 05:44 - 2013-10-28 16:06 - 00229264 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\sdxg.dll
2014-08-19 05:44 - 2013-10-28 16:06 - 00387984 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\fl_core.dll
2014-08-19 05:44 - 2013-10-28 16:07 - 01165712 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_asr.dll
2014-08-19 05:44 - 2013-10-28 16:07 - 00035216 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_platform.dll
2014-08-19 05:44 - 2013-10-28 16:07 - 00199056 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_base.dll
2014-08-19 05:44 - 2013-10-28 16:07 - 01132944 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_pron.dll
2014-08-19 05:41 - 2011-08-02 22:58 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2014-08-19 05:41 - 2011-08-02 22:58 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2014-11-15 13:39 - 2014-03-07 19:56 - 00117262 ___SH () C:\Program Files (x86)\Ubmobraimationsmomy\libgcc_s_dw2-1.dll
2014-11-15 13:39 - 2014-03-07 19:56 - 00970766 ___SH () C:\Program Files (x86)\Ubmobraimationsmomy\libstdc++-6.dll
2014-08-19 05:28 - 2013-12-03 00:36 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Windows:nlsPreferences
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================
Administrator (S-1-5-21-2290190785-3451889800-4021786315-500 - Administrator - Disabled)
Guest (S-1-5-21-2290190785-3451889800-4021786315-501 - Limited - Enabled)
Nate (S-1-5-21-2290190785-3451889800-4021786315-1001 - Limited - Enabled)
Pesh (S-1-5-21-2290190785-3451889800-4021786315-1000 - Administrator - Enabled) => C:\Users\Pesh
==================== Faulty Device Manager Devices =============
Name: Lenovo Connect Device 1.0
Description: Lenovo Connect Device 1.0
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: =========================
Application errors:
==================
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 228: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 648: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 668: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 744: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 628: DNSServiceGetAddrInfo      v4v6 BLACKBERRY-48C9.local.
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 628: Could not write data to client because of error - aborting connection

System errors:
=============
Error: (11/18/2014 07:36:17 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the LENOVO.CAMMUTE service.
Error: (11/18/2014 07:16:21 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DisplayLinkService service.
Error: (11/18/2014 07:16:21 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the LENOVO.CAMMUTE service.
Error: (11/18/2014 06:48:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/18/2014 06:46:08 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (11/18/2014 06:43:42 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/18/2014 06:43:08 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (11/18/2014 06:37:49 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the LENOVO.CAMMUTE service.
Error: (11/18/2014 05:33:36 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/18/2014 05:29:28 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Microsoft Office Sessions:
=========================
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 228: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 648: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 668: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 744: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 628: DNSServiceGetAddrInfo      v4v6 BLACKBERRY-48C9.local.
Error: (11/18/2014 07:36:38 PM) (Source: RIM MDNS) (EventID: 100) (User: )
Description: 628: Could not write data to client because of error - aborting connection

CodeIntegrity Errors:
===================================
  Date: 2014-11-18 18:48:39.245
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 18:43:42.902
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 17:33:36.260
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 16:47:03.524
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 15:36:01.713
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 15:23:13.934
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 14:51:06.260
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 14:46:28.304
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 14:37:45.199
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
  Date: 2014-11-18 14:34:21.104
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================
Processor: Intel® Core™ i7-4600U CPU @ 2.10GHz
Percentage of memory in use: 24%
Total physical RAM: 7851.23 MB
Available physical RAM: 5907.93 MB
Total Pagefile: 15700.63 MB
Available Pagefile: 13620.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:214.2 GB) (Free:164.21 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:15.81 GB) (Free:3.75 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 2C5ED169)
Partition 1: (Active) - (Size=1.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=214.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=7 GB) - (Type=84)
==================== End Of Log ============================
 
 
 
 
FRST
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-11-2014
Ran by Pesh (administrator) on PESH-PC on 18-11-2014 19:53:11
Running from C:\Users\Pesh\Desktop
Loaded Profile: Pesh (Available profiles: Pesh)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Softex Inc.) C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
() C:\Program Files (x86)\Ubmobraimationsmomy\Ubmobraimationsmomy.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(MicroStudio) C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe
(MicroTools) C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
() C:\Program Files (x86)\Ubmobraimationsmomy\UbmobraimationsmomyHelper.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
() C:\Program Files\Lenovo\Fingerprint Manager Pro\opvapp.exe
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe
(LITE-ON TECHNOLOGY CORP.) C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\Skdaemon.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Nok Nok Labs, Inc.) C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\mfac.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Docking Station) C:\Program Files (x86)\Lenovo\USB3.0 DVI Adapter\igpxtskmgn64win7.exe
() C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\dfrctl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Lenovo Corporation) C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe

==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtsCM] => C:\Windows\RTSCM64.EXE [151768 2013-09-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Enhanced Performance Keyboard] => C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe [335360 2012-08-08] (LITE-ON TECHNOLOGY CORP.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184632 2013-10-18] (Motorola Solutions, Inc.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2809072 2014-02-24] (Synaptics Incorporated)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [297008 2014-01-28] (Lenovo Group Limited)
HKLM\...\Run: [MFACApp] => C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\mfac.exe [5449544 2014-10-16] (Nok Nok Labs, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [134616 2013-12-03] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-08-15] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443408 2014-03-18] (BlackBerry Limited)
HKLM-x32\...\Run: [RIM PeerManager] => C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4494848 2014-06-23] (Research In Motion Limited)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2290190785-3451889800-4021786315-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2290190785-3451889800-4021786315-1000\...\MountPoints2: {2c4ae247-278b-11e4-8054-806e6f6e6963} - Q:\LenovoQDrive.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\igpxtskmgn.lnk
ShortcutTarget: igpxtskmgn.lnk -> C:\Program Files (x86)\Lenovo\USB3.0 DVI Adapter\igpxtskmgn64win7.exe (Docking Station)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk
ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe ()
Startup: C:\Users\Pesh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (No File)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2290190785-3451889800-4021786315-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKU\S-1-5-21-2290190785-3451889800-4021786315-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {DE9BB064-F4EE-470F-A64B-B272070AAFF8} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {DE9BB064-F4EE-470F-A64B-B272070AAFF8} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {DE9BB064-F4EE-470F-A64B-B272070AAFF8} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Pesh\AppData\Roaming\Mozilla\Firefox\Profiles\zpYaOo.default
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin-x32: @update.noknok.com/Nok Nok Labs MFACUpdater;version=3 -> C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\1.3.27.0\npGoogleUpdate3.dll (Nok Nok Labs Inc.)
FF Plugin-x32: @update.noknok.com/Nok Nok Labs MFACUpdater;version=9 -> C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\1.3.27.0\npGoogleUpdate3.dll (Nok Nok Labs Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\firefox\x86\FIDOaddon
FF Extension: MFAC Extension - C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\firefox\x86\FIDOaddon [2014-10-07]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn [2014-11-18]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\firefox\x86\FIDOaddon
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Pesh\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (TinyWallet) - C:\Users\Pesh\AppData\Local\Google\Chrome\User Data\Default\Extensions\icnojjjohdejfcenfgfchojnemeehfmn [2014-11-15]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx []
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-07]
CHR HKLM-x32\...\Chrome\Extension: [mbgbpjganndfjjmlamggkkkjafblbahl] - C:\Program Files\Nok Nok Labs\Multifactor Authentication Client\bin\Chrome\x86\FidoExtension.crx [2014-10-16]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-07]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2014-03-18] (BlackBerry Limited) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 DACoreService; C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe [447376 2013-10-28] (Nuance Communications, Inc.)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9281840 2013-10-11] (DisplayLink Corp.)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2013-09-02] (Lenovo.)
R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [113096 2013-11-22] ()
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-12-03] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [532224 2014-04-22] (Lenovo)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [198704 2014-01-28] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [21552 2014-02-17] (Lenovo)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-11-20] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2014-02-14] (Nitro PDF Software)
S2 omaha; C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe [148272 2014-10-07] (Nok Nok Labs Inc.)
S3 omaham; C:\Program Files (x86)\Nok Nok Labs\MFACUpdater\MFACUpdate.exe [148272 2014-10-07] (Nok Nok Labs Inc.)
R2 omniserv; C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe [94208 2014-06-25] (Softex Inc.) [File not signed]
S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [59440 2014-02-12] (Lenovo Group Limited)
R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [322608 2014-02-12] (Lenovo Group Limited)
R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [389632 2014-06-23] (Apple Inc.) [File not signed]
R2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1325568 2014-06-23] (Research In Motion Limited) [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] ()
R2 Ubmobraimationsmomy; C:\Program Files (x86)\Ubmobraimationsmomy\Ubmobraimationsmomy.exe [4377560 2014-11-03] ()
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [47504 2014-06-13] (Synaptics Incorporated)
R2 WindowsVNT_R3; C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe [2973600 2014-10-20] (MicroStudio) [File not signed]
R2 YouTubeDownload_P2; C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe [2967160 2014-11-01] (MicroTools)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2013-11-20] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20141030.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1408824 2013-10-18] (Motorola Solutions, Inc.)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-20] (Symantec Corporation)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [488216 2014-03-05] (Intel Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-10-07] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-10-07] (Symantec Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-14] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [142280 2013-10-18] (Intel Corporation)
R3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20141107.001\IDSvia64.sys [633560 2014-10-06] (Symantec Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100824 2013-12-03] (Intel Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20141109.023\ENG64.SYS [129752 2014-10-07] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20141109.023\EX64.SYS [2137304 2014-10-07] (Symantec Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw02.sys [3601888 2013-12-05] (Intel Corporation)
R1 OMNISMI; C:\Windows\SysWOW64\drivers\omnismi.sys [14776 2014-01-15] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2013-12-02] (BlackBerry Limited)
R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [17920 2014-06-23] (Research in Motion Limited)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8874712 2013-09-18] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-07-31] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-08-25] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-08-19] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-08-25] (Symantec Corporation)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2013-09-26] (ThinkVantage Communications Utility)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-20] (Windows ® Win 7 DDK provider)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-11] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-18 19:53 - 2014-11-18 19:53 - 00023619 _____ () C:\Users\Pesh\Desktop\FRST.txt
2014-11-18 19:50 - 2014-11-19 00:35 - 02117120 ____N (Farbar) C:\Users\Pesh\Desktop\FRST64.exe
2014-11-18 19:37 - 2014-11-18 19:53 - 00000000 ____D () C:\FRST
2014-11-18 18:41 - 2014-11-18 18:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-18 18:41 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-18 14:38 - 2014-11-18 14:38 - 00000000 ____H () C:\Users\Pesh\AppData\Local\BIT7E91.tmp
2014-11-18 14:38 - 2014-11-18 14:38 - 00000000 _____ () C:\Users\Pesh\AppData\Local\{E62D025D-8CE0-4BC8-8402-DE19F649E40D}
2014-11-18 14:17 - 2014-11-18 14:17 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-18 09:31 - 2014-11-18 09:31 - 00000000 ____H () C:\Users\Pesh\AppData\Local\BIT7261.tmp
2014-11-18 09:31 - 2014-11-18 09:31 - 00000000 _____ () C:\Users\Pesh\AppData\Local\{D02DC38E-28E9-4ED7-838E-6613EBBF5490}
2014-11-17 23:26 - 2014-11-17 23:26 - 00000000 ____D () C:\Users\Pesh\AppData\Roaming\Nitro
2014-11-16 23:30 - 2014-11-16 23:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-11-16 18:15 - 2014-11-16 18:15 - 00000000 _____ () C:\autoexec.bat
2014-11-16 13:51 - 2014-11-16 13:54 - 00000000 ____D () C:\AdwCleaner
2014-11-15 14:44 - 2014-11-16 13:56 - 00001608 _____ () C:\ProgramData\tempimage.bmp
2014-11-15 14:42 - 2014-11-15 14:43 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-11-15 14:32 - 2014-11-15 14:32 - 00003402 _____ () C:\Windows\System32\Tasks\DonutQuotes
2014-11-15 14:21 - 2014-11-15 14:42 - 00000416 _____ () C:\Windows\SysWOW64\ff.bin
2014-11-15 14:20 - 2014-11-15 14:42 - 00000552 _____ () C:\Windows\SysWOW64\schtasks.bin
2014-11-15 14:15 - 2014-11-15 14:15 - 00000000 ____D () C:\ProgramData\Windows VXM
2014-11-15 14:15 - 2014-11-15 14:15 - 00000000 ____D () C:\Program Files (x86)\Windows Network Accelerater
2014-11-15 14:14 - 2014-11-17 23:34 - 00000000 ____D () C:\ProgramData\Optimizer
2014-11-15 14:14 - 2014-11-15 14:14 - 00613012 _____ (CMI Limited) C:\Users\Pesh\AppData\Local\nsz7495.tmp
2014-11-15 14:14 - 2014-11-15 14:14 - 00000000 ____D () C:\Program Files (x86)\YouTube Downloader Services
2014-11-15 14:07 - 2014-11-15 14:24 - 00002065 _____ () C:\Windows\patsearch.bin
2014-11-15 14:07 - 2014-11-15 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrT_01009.Wdf
2014-11-15 14:04 - 2014-11-15 14:04 - 00000000 ____D () C:\Users\Pesh\AppData\Local\IsolatedStorage
2014-11-15 14:04 - 2014-11-15 14:04 - 00000000 ____D () C:\ProgramData\COMODO
2014-11-15 14:04 - 2014-11-15 14:04 - 00000000 ____D () C:\Program Files\COMODO
2014-11-15 13:41 - 2014-11-15 13:41 - 00000394 __RSH () C:\ProgramData\ntuser.pol
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Pesh\AppData\Local\Google
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Pesh\AppData\Local\Comodo
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Nate\AppData\Local\Google
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Nate\AppData\Local\Comodo
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Nate
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Guest
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-15 13:41 - 2014-11-15 13:41 - 00000000 ____D () C:\Users\Administrator
2014-11-15 13:40 - 2014-11-18 18:48 - 00001682 _____ () C:\Windows\Tasks\RGZTMXQV.job
2014-11-15 13:40 - 2014-11-18 18:48 - 00001328 _____ () C:\Windows\Tasks\OUG.job
2014-11-15 13:40 - 2014-11-15 13:40 - 00004704 _____ () C:\Windows\System32\Tasks\RGZTMXQV
2014-11-15 13:40 - 2014-11-15 13:40 - 00004350 _____ () C:\Windows\System32\Tasks\OUG
2014-11-15 13:39 - 2014-11-15 13:39 - 00000000 __SHD () C:\Program Files (x86)\Ubmobraimationsmomy
2014-11-15 12:56 - 2014-11-15 12:56 - 00000000 __SHD () C:\Users\Pesh\AppData\Local\EmieBrowserModeList
2014-11-14 14:36 - 2014-11-14 14:36 - 00002236 _____ () C:\Users\Public\Desktop\BlackBerry Link.lnk
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_RimUsb_AMD64_01007.Wdf
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____D () C:\Users\Pesh\AppData\Roaming\Research In Motion
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____D () C:\Users\Pesh\AppData\Local\Research In Motion
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____D () C:\ProgramData\Research In Motion
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 ____D () C:\Program Files (x86)\Research In Motion
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 _____ () C:\Windows\SysWOW64\out.txt
2014-11-14 14:36 - 2014-11-14 14:36 - 00000000 _____ () C:\Windows\SysWOW64\err.txt
2014-11-14 12:29 - 2014-11-07 14:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-14 12:29 - 2014-11-07 14:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-14 12:29 - 2014-11-05 23:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-14 12:29 - 2014-11-05 23:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-14 12:29 - 2014-11-05 23:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-14 12:29 - 2014-11-05 22:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-14 12:29 - 2014-11-05 22:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-14 12:29 - 2014-11-05 22:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-14 12:29 - 2014-11-05 22:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-14 12:29 - 2014-11-05 22:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-14 12:29 - 2014-11-05 22:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-14 12:29 - 2014-11-05 22:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-14 12:29 - 2014-11-05 22:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-14 12:29 - 2014-11-05 22:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-14 12:29 - 2014-11-05 22:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-14 12:29 - 2014-11-05 22:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-14 12:29 - 2014-11-05 22:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-14 12:29 - 2014-11-05 22:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-14 12:29 - 2014-11-05 22:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-14 12:29 - 2014-11-05 22:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-14 12:29 - 2014-11-05 22:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-14 12:29 - 2014-11-05 22:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-14 12:29 - 2014-11-05 22:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-14 12:29 - 2014-11-05 22:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-14 12:29 - 2014-11-05 22:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-14 12:29 - 2014-11-05 22:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-14 12:29 - 2014-11-05 22:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-14 12:29 - 2014-11-05 22:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-14 12:29 - 2014-11-05 22:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-14 12:29 - 2014-11-05 22:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-14 12:29 - 2014-11-05 22:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-14 12:29 - 2014-11-05 22:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-14 12:29 - 2014-11-05 21:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-14 12:29 - 2014-11-05 21:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-14 12:29 - 2014-11-05 21:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-14 12:29 - 2014-11-05 21:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-14 12:29 - 2014-11-05 21:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-14 12:29 - 2014-11-05 21:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-14 12:29 - 2014-11-05 21:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-14 12:29 - 2014-11-05 21:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-14 12:29 - 2014-11-05 21:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-14 12:29 - 2014-11-05 21:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-14 12:29 - 2014-11-05 21:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-14 12:29 - 2014-11-05 21:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-14 12:29 - 2014-11-05 21:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-14 12:29 - 2014-11-05 21:22 - 00688640

Read other 3 answers
RELEVANCY SCORE 82.4

I removed a  bunchof malware that got into this system and IE will still not connect.Always saying proxy not responding. They prxy is always reset  Hijack  this log below
 

 hijackthis.log   7.22KB
  0 downloads

A:Proxy settings always revert to 127.0.0.1:8800

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/556401 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers
RELEVANCY SCORE 82.4

I'm using a Windows 8.1 64-bit computer that had PastaLeads on it. It was removed by Malwarebytes Anti-Malware, but now there is a persistent proxy set. I receive the message "Check your proxy settings 127.0.0.1:8800". It cannot be disabled by turning it off in the Internet Explorer settings. It keeps re-enabling. I can go online using Firefox if I set it to not use any proxy, but nothing else works online.
I need help to remove this proxy.

A:Check your proxy settings 127.0.0.1:8800

Hello
This is our online DIY for removal of >> Remove the PastaLeads and PastaQuotes Adware << and to reset 127.0.0.1:8800
Please follow the link and it should clean up your problem. If not our Experts can guide you step by step as it is written.
Please tell me how you go with it  ..........
 
Thank You -

Read other 6 answers
RELEVANCY SCORE 82.4

Hi all,
 
I'm having trouble removing a proxy setting of 127.0.0:8800.  I'm running Win 7 Ultimate 64bit SP1.  I have tried several of the items mentioned in the following thread http://www.bleepingcomputer.com/forums/t/548709/cannot-remove-proxy-settings-1270015050/, but all have been unsucessfull.  I have run Malwarebytes, hijackthis, spybit, TDSSKiller to no effect.  I have attached the FRST text file in the hopes that someone can assist.  I also have ESET Online scanner ready to go.
 
I am currently using Firefox 33.0.2 as it does not use the Windows Proxy settings.  I have tried uninstalling Chrome thinking that it may have been resetting the settings, also to no effect.  I have Safari 5.1 and IE 11 still installed.

A:cannot remove Proxy settings 127.0.0.1:8800

Is there anyone that can help me wit this issue?

Read other 3 answers
RELEVANCY SCORE 81.6

Can someone please give me some guidance on how to get rid of this? I've tried everything that I can think of, and can't figure out what's causing the changes to revert back automatically. I can use firefox to get around the proxy settings, but nothing I try is helping with the system proxy settings.
 
Any help is apreciated.

A:Proxy settings keep automatically changing to 127.0.0.1:8800

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/557403 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 20 answers
RELEVANCY SCORE 80.4

I have a laptop that has sometime of setting for the Internet LAN that I cannot modify. I assume that this is in the registry somewhere. I have attempted to download malware and adware software searches for it and could not locate anything. I have all of the logs. Now I cannot access the internet at all on this machine so I have been utilizing a thumb drive to install items. 
 
It is extremely frustrating, but I see that others are experiencing the same issues. 
Please help. 
Thanks. 
 

A:Proxy server isn't responding. Check settings 127.0.0.1:8800

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/557408 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 25 answers
RELEVANCY SCORE 78.4

I've been having a ton of problems since my boyfriend clicked on an email he thought was authentic from an ebay fraud. Web pages have been slow to not responsive, I kept getting errors about remote server refusing connections, the lan service kept showing proxy server settings and when I would uncheck the box, it just went back again and the check reappears. I tried a system restore and when it came back on it was doing something with new settings and there was never a box or anything with an option to make new settings from the restore. I've done this a few times before and never had settings load like this did. Since then everything seems to have problems. Also, I cannot view the wireless adapter properties because it says I don't have administrative privileges which is what I sign in under I think and also when I click on the show characters under the password it never shows it now just makes the check disappear. I ran hijack and this is what I got:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:16:34 AM, on 2/17/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\HP SimplePass\TouchControl.exe
C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program... Read more

Read other answers
RELEVANCY SCORE 78.4

Hello there,

I am using a program called Intervoip (v4.05) that can make phone calls over the internet.

I have been using it with my network here for a while but a couple of days back I cleaned my hard drive and reinstalled it and now it wont connect to the internet anymore.

Now, the proxy server is proxy.stusta.mhn.de, with port 3128 (3130 also seems to work somehow) with my browsers.

In the Voip programs advanced connection settings tab, there is a "Use Port" setting.. I entered 3128 here but it still cant connect

There is no other setting where I can enter the actual address.. only a port number. I tried it out at an internet cafe with WiFi and the program worked fine today.... but back home on the network and it doesnt work anymore.. just keeps trying to connect to the internet without luck. I also tried it without any port number but that didnt work either.

I am on Win XP SP3. Please note that this software was working over this network all these days somehow ( I am not sure whether I had the port number entered in there or not though). It used to take a minute or so to connect but it used to, nonetheless.
Any suggestions?

Thanks,

Frigitar
P.S. Attached is a screenshot
 

A:Voip software wont connect through Internet via proxy settings

It's good to know that hardware malfunction isn't the issue. That would be another hunk of change in order to replace it.
I don't think that wiping the hard drive was a part of it either.

Do you have the program loaded on an external storage device, or did you also just load up the program at the cafe?
 

Read other 3 answers
RELEVANCY SCORE 77.2

I am having problems with my son's Dell Inspiron N5110. I can't get the computer to connect to the internet. I have done almost everything I can find on message boards related to this subject. When I try to connect to the internet, explorer (or firefox) cannot display the webpage. The troubleshooting message indicates "Windows could not automatically detect this network's proxy settings."
I have other computers that can connect to the internet with no problem. I have tried to connect with a wired connection, but that doesn't work either.
The info on the computer is as follows:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 4003 Mb
Graphics Card: Intel(R) HD Graphics Family, 1809 Mb
Hard Drives: C: Total - 462936 MB, Free - 424812 MB; D: Total - 14000 MB, Free - 7467 MB;
Motherboard: Dell Inc., 034W60
Antivirus: None
The antivirus says none because I uninstalled the McAfee that was on the machine. I ran a full scan before doing to and nothing came up.

I have tried many things. I made sure the box for using a proxy server was unchecked under the LAN settings. "Automatically detect settings" is checked otherwise.

I reinstalled an updated driver to no avail. I did the netsh winsock reset, ipv4 reset, etc.

The IPconfig/all shows the following:

C:\Use... Read more

A:Can't connect to internet - error message says can't detect network's proxy settings

Read other 16 answers
RELEVANCY SCORE 67.2

There is a software which often changes the proxy settings so I decided to config the internet settings registry right to reject the proxy settings. But When I decided to delete this software and return the rights back, I suddenly found that I can not change
the proxy settings manually!
The detail is that I change the auto proxy url, to let my pc use a pac file and I don't want any softwares to change. However, when I decided to give the rights back and try to change the url back, it never success, and even the same when i'm sure I have
cleared this url in the whole registry, but it back, as it never changes!
I check the registry rights twice or more to make sure that the rights has given back, just like it originally should be. But it never works.
So the result is I have to clear and reinstall the WINDOWS 10 AGAIN!
Never should you save such information both in registry and somewhere I don't know! Or you should let these stuffs out of the ** registry!

Read other answers
RELEVANCY SCORE 66

I have a new Dell Inspiron 14Z (purchased in February), it has been running great until recently, the internet connection (wireless) completely stopped working.

When I try to connect through Internet Explorer, it says Internet Explorer cannot display the webpage. I Diagnose Connection Problems, and this is what I get:
"Windows could not automatically detect this network's proxy settings."

On Chrome, I got a long list of things to do (check DNS settings, LAN Network, etc. have tried every and all checked/unchecked box they advise.) This error shows up:
Error 105 (net:: ERR_NAME_NOT_RESOLVED): The server could not be found.

However, I accidentally uninstalled Chrome trying to fix this problem, so Internet Explorer is all I have.

It's been about 2-3 weeks with no internet. Have tried connecting to 5+ different networks (Home- AT&T U-verse, University of Texas Network, restaurants, etc) tried restarting my computer, setting my LAN settings back to normal, and it still won't work. Other computers work on all of the networks I've tried, it's just mine that wont.

Under the Control Panel, this is what's listed as my System:Windows 7 Home premium
2009
Service Pack 1
Make: Dell
Model: INSPIRON N411Z
Processor: Intel(R) Core(TM) i3-2350m CPU @ 2.3GHz 2.30GHz
Installed memory (RAM): 400GH (3.89 GB useable)
​I use McAfee for as my virus protection, here is that info as well:McAfee SecurityCenter: Version 11.0
McAfee VirusScan: Vers... Read more

A:Can't connect to ANY wireless network, PROXY settings

Read other 15 answers
RELEVANCY SCORE 62.8

Background.
I recently installed some free software which came with some adware, and changed my browser settings (home page, default search engines.) After some work I was able to remove them, but now have encountered a new problem which I expect is also malware related. ProblemWhen I direct my browsers to any website I get a message saying that there is no response from the proxy server. I have never used a proxy server for internet access and when I go into my Internet Properties>LAN Settings and un-check "Use a proxy Server for your LAN" and check "Automatically detect settings" the settings are not remembered and revert as soon as I close and re-open "LAN Settings" rendering my browsers useless. Things I've TriedScans with
Malwarebytes antimalware
Microsoft security essentials
Spybot Search and Destroy
CCleaner (cleaner and registry)
Using regedit to manually delete suspicious registry keysThe FRST fixlist hereThe OTL fix here
 
Any help you can offer is appreciated. I am accessing the internet via a netbook and have been installing scanners to the infected PC via flash drive.
 
DDS:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.16428
Run by David at 14:42:47 on 2014-08-17
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8160.6775 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA... Read more

A:malware preventing change of internet proxy settings, cannot access internet

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/544752 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 14 answers
RELEVANCY SCORE 62.8

Our current Windows 8/IE10 tablets apply a group policy which sets up the IE proxy configuration and prevents users from changing that configuration.
This is done using the settings "Prevent changing proxy settings" and "Disable changing automatic configuration settings" (located at computer configuration\administrative templates\windows components\internet explorer).
With Windows 8.1/IE11, the proxy server settings are still greyed out in the LAN settings dialog box under Internet Options\Connections in the desktop IE environment.
However in 8.1 the proxy settings can also be accessed from the Settings charm: Settings - Change PC Settings - Network - Proxy.  From this location, ordinary users can modify and save changes to the proxy configuration.
Is there any way to lock this down?

A:Locking down IE proxy settings under PC Settings\Network\Proxy on Windows 8.1

Update on this - a very helpful Microsoft engineer came back with a workaround which, while not ideal, is a lot better than letting users change their proxy settings.
When I said I was going to post it here, the engineer said to make sure I started with the statement that Binary registry keys as used in this solution shouldn't generally be messed about with, and that editing the registry without first backing it up may
also lead to plagues of locusts, etc.  All the usual disclaimers, so use this at your own risk.
His solution, which we've tested, involves switching from per-user proxy settings to per-machine proxy settings. 
The Microsoft workaround word for word is:
The first thing we need to do is to export the following registry key from a machine that has the correct proxy settings set.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
This contains the following 2 binary registry keys which have the connections settings: ?DefaultConnectionSettings? and ?SavedLegacySettings?
The next step is to open the newly exported .reg file and to change the path:
From: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
To: HKEY_Local_Machine\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
For a test on a single machine you can manually change this, from elevated cmd: regedit <file>.reg
For a bigger scale you can create a script to deploy the... Read more

Read other 10 answers
RELEVANCY SCORE 62.4

Hi.  I'm having an issue with my laptop. Recently a popup said I needed to update java and when I did this, a bunch of adware/malware got loaded onto the computer.  I got rid of most of it with ccleaner, security essentials and malwarebytes, but there seems to be some residual problem with the intenet connection proxy being set to 127.0.0.1:8800.  In control panel, if I click on auto proxy settings, it reverts back to this proxy.  Ditto on firefox.  I can manually click on the internet options and choose no proxy but it reverts back every time and I have to manually undo the proxy setting if I want to connect. I have Windows 7.  Can you help?

A:127.0.0.1:8800 proxy

Hello and welcome. Please do these and see how it is.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the tool.Vista/Windows 7/... Read more

Read other 21 answers
RELEVANCY SCORE 62.4

Hi,
 
I saw another post on your website with this same problem, though I don't think that this proxy on my machine originated from the same adware program. Can I use your directions for the other machine to fix my proxy problem, or can you help?  In Windows 7, Control Panel, Internet Connections it says it's set to a proxy with the number in the topic title.  I can't seem to change the setttings.  It will let me check the no proxy box, but when I reopen the control panel the internet connections settings have reverted back to the proxy.  I can connect to the internet by manually turning off the proxy setting in the internet options (on firefox), but if I close the browser and reopen it, I get the proxy problem again and can't connect to the internet until I manually undo the proxy setting.  This proxy setting appears to be interfering with other programs like Amazon Music, so I cannot connect to the internet using that program because of the automatic proxy setting.  Should I follow the same directions as in the other 127.1.1.1:8800 proxy post or since this is a different computer, are the steps different?  Help?

A:proxy set to 127.0.0.1:8800

Hello -
Should I follow the same directions as in the other 127.1.1.1:8800 proxy post or since this is a different computer, are the steps different?  Help?
You may find that there are problems related to another computer but not related to yours.
 
It is always better to start out fresh with a new post in the Am I Infected area of the forum -
 
Regards -

Read other 2 answers
RELEVANCY SCORE 62

I'm having a proxy problem with my win7 x64 HP pavilion g6 notebook, even though its connected to internet it wont load/display anything. I've seen this problem with hundreds of people on multiple forums and it seems the only option is to let someone who knows what they are doing help me so I don't unknowingly cause irreversible damage. I have already downloaded FRST64 and malwarebytes but have NOT yet run them yet, I think I may need a fixlist too. I'm also having problems downloading things to my laptop as the internet is blocked and I have to use a windows phone to aquire any programs but Apparently a windows phone cant support file's meant for windows 😠 ... Very confusing. I may have to go round the bend to get any files/programs that any of the malware team recommend to me so whoever helps me will have to bear with me. Thanks in advance.

A:proxy error 127.0.0.1:8800

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully.First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.     HijackThis is not the preferred initial scanning tool in this forum. With today's malware, a more comprehensive set of logs is required to determine the presence of malware.    Scan with FRST in normal modePlease download Farbar's Recovery Scan Tool to you... Read more

Read other 5 answers
RELEVANCY SCORE 62

I'm seeing the same symptoms as reported at http://www.bleepingcomputer.com/forums/t/563413/proxy-settings-that-cant-be-removed/. Not much joy in that thread. I followed the instructions there up to the point that FRST scripts were being used, but the proxy checkbox cannot be unchecked.
Should I pursue help on this thread or await developments in the other one?
Thanks,
Steve

A:Persistent proxy 127.0.0.1:8800

If you have already run FRST...then I would suggest initiating a topic in the forum containing the Prep Guide .
 
If you have not yet run FRST...you can initiate your own topic or simply monitor the other topic, if you like.
 
FWIW:  Just because a given situation seems similar...the causes for that situation are not necessarily identical.  If the causes are not identical, monitoring will not be of very much value, IMO, since there are any number of circumstances that may create seemingly similar symptoms.
 
This topic moved to Am I Infected since it does not contain any FRST/DDS, etc. logs and does not qualify for investigation in MRL.
 
Louis

Read other 1 answers
RELEVANCY SCORE 62

If I set a proxy to be used, in Internet Explorer, will all other applications also go through this proxy then, such as Firefox, bittorrent, Skype etc?

A:Proxy settings, in Internet Explorer?

Originally Posted by martienne


If I set a proxy to be used, in Internet Explorer, will all other applications also go through this proxy then, such as Firefox, bittorrent, Skype etc?



No.

Each application will have it's own proxy settings. Some, such as Firefox, will have the option of using system settings but this must be manually selected. Others will require manual proxy settings.

Read other 1 answers
RELEVANCY SCORE 62

Hi,
We are setting up our Windows 7 PC's to use a proxy server for Internet access, as part of this we are ticking the bypass proxy for local addresses check box and entering the required server names.
What we are seeing though is if the servername has a hyphen in it's name it seems to split it over two lines., for example if the address web-mail.domainname.com is not the first in the line it gets split at the hyphen for example:
mailserver.domain.com;web-
mail.domain.com
Is this just a display issue? Or is there a problem with using hyphens in the servername?
Thanks,
alamb200

Read other answers
RELEVANCY SCORE 62

Hello,

My friend recently bought a new computer, an HP running Windows XP "Media Center Edition". When trying to download Java Runtime Enviroment, however, it gives us the following error message: "The installer cannot proceed with the current Internet Connection proxy settings. Please check the Installation Notes for more information." I have no idea what proxy settings they mean, or what "Installation Notes" they might be referring to. Can anyone here shed light on the matter?

Thanks!
 

A:Internet Connection Proxy Settings?

Read other 8 answers
RELEVANCY SCORE 62

Currently, my internet settings acquire a proxy setting set on the internet explorer.
As In;
-->Tools
-->Internet options
-->(Connection tab)LAN settings
-->Proxy settings are put in instead of automatically detect settings

Internet works fine now but i have a big problem

Most of my programs that connect to the internet can't connect to the internet. These programs are such as MMORPGS and GSC.

What should i do to allow these programs to connect to the internet again?

-Thanks in advance
 

A:Internet Proxy Settings and Programs

Read other 7 answers
RELEVANCY SCORE 62

Hi, i can not work this out and have looked everywhere.

I dont really understand proxys and i need to connect to my school internet.

I am on windows 8 running bootcamp and dont use the mac partition anymore.

the details for this network are
i know the ssid, i know the password.

but on a mac you press advance then proxy settings and configure http and https which has proxy ip and port(i have the details) and i type in my school username and password the school provided to me.

how do i get to this stage on windows, i cant find it anywhere? does it come up when i choose the network, because im trying to do this before ive been to school after holidays?

cheers

A:Proxy Settings for school internet

oh yer the security is wpa2 personal

Read other 1 answers
RELEVANCY SCORE 62

I went on a vacation recently and came back to discover that my housesitter messed my computer up. I kept getting the warnings about my computer being infected with several viruses (malicious adware software), I can't remember exactly which one it was. I got rid of it, but then I could not get on the internet. I finally discovered a post about unchecking "Use a proxy server for your LAN", so I unchecked it and was able to access the internet. However, whenever I try to google anything, it takes me to different "search" websites instead of linking me directly to the site I want. Or, it will send me to a website that's trying to sell me something and I have to completely close IE down. This is getting really old, and I don't know how to fix it. If I recheck the proxy server box, I cannot get on the internet again. If anyone knows how to fix this, I would appreciate it. Thanks in advance!

A:Internet Explorer proxy settings

You are still infected. Click this link and follow the instructions to have a security analyst look at your system. NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

Read other 2 answers
RELEVANCY SCORE 62

What is the purpose of a sofware program trying to change the Proxy Bypass on Internet settings? Is it malicious?

A:Proxy Bypass on Internet settings

  
Quote: Originally Posted by Maccman


What is the purpose of a sofware program trying to change the Proxy Bypass on Internet settings? Is it malicious?



We need a lot more information like what malware app are you running, whats the name of the app, what does it try to change the settings to, etc, etc.

I would start by downloading Malwarebytes and running it.

Read other 3 answers
RELEVANCY SCORE 61.2

Hi,
 
I've been following a few recent threads of people in a similar position. I repeatedly manually disable a proxy server only to find it keeps returning.
 
Please see the attached FRST.txt and addition.txt from FRST. Might someone recommend what text I should include in my fixlist.txt to remove the problems? 
 
Thanks!

A:Remove proxy setting 127.0.0.1:8800

Hello,
 
I'm attaching the reports from AdwCleaner as well since it looks like most other posts ask for them.
 
Thanks!

Read other 29 answers
RELEVANCY SCORE 61.2

I have removed some malware and virus with various programs like malwarebytes, cclearner, eset, spybot but I am still unable to change my proxy settings or turn off the proxy. It is stuck on 127.0.0.1    8800    <-loopback> . I saw another user with same problem but I was unsure to use the same methods due to computer differences. I scanned my computer with FRST64.exe and here are my results (Its a 2 part post). Thanks for taking a look.
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2014
Ran by madpo_000 (administrator) on JORDANSDESKTOP on 19-12-2014 12:49:27
Running from C:\Users\madpo_000\Desktop
Loaded Profile: madpo_000 (Available profiles: madpo_000 & Administrator)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Atheros Commnucations) C:\Windows\System32\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Microsoft Corporation) C:\Windows\Syste... Read more

A:Proxy wont change from 127.0.0.1 8800

2014-12-18 21:28 - 2014-10-28 17:51 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clip.exe
2014-12-18 21:28 - 2014-10-28 17:51 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dswave.dll
2014-12-18 21:28 - 2014-10-28 17:51 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshcon.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdri.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceoledb40.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcecompact40.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmsynth.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2014-12-18 21:28 - 2014-10-28 17:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avifil32.dll
2014-12-18 21:28 - 2014-10-28 17:50 - 00054784 _____ (Microsoft... Read more

Read other 4 answers
RELEVANCY SCORE 61.2

Hello, kid installed a youtube accelerator and since then unable to find proxy server and found that I am unable to change the proxy 127.0.01:8800
 
Hardware: Asus Core I3
OS: Windows 7 Home Premium

Thanks for help and look forward for more instructions
 
Sincerely,
 
Wen

A:Proxy server isn't responding - 127.0.0.1:8800

Hello, and thanks for helping....
 
By reading other with similar problem....  I have download and run the FARBAR Recovery Scan and this are the FRST.TXT file 12/02/2014 14:11 PST
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014
Ran by VTHAI68 (administrator) on VTHAI68-PC on 02-12-2014 14:08:16
Running from C:\Users\VTHAI68\Desktop
Loaded Profile: VTHAI68 (Available profiles: VTHAI68 & Giselle & Wen & Richard)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple... Read more

Read other 25 answers
RELEVANCY SCORE 61.2

Hello,
 
I am working on a friend's computer which seems to have a nastily persistent virus which is constantly setting proxy settings to a loopback address. All removal processes found online have resulted in nothing, deleting the registry settings just lets them return on the next reboot.
 
I stumbled across someone that was able to solve this with the help of your team and the use of a software package called "FRST". This is my first use with this package, and I am sad to find that there is no documentation on how to generate our own fixlist.txt file -- this would be extremely useful when no network access is available.
 
Anyhow, here is my FRST report. In advance, thank you for your help in this matter.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 02
Ran by Smurfs (administrator) on SMURFCLAN on 13-01-2015 20:06:29
Running from G:\Tools
Loaded Profile: Smurfs (Available profiles: Smurfs)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(A... Read more

A:Proxy Loopback Hijack - 127.0.0.1:8800

Well, I took it upon myself to attempt to tackle this. This was due to the user's need for the computer and in part due to my own impatience.
 
I checked a few other fixthis.txt files available for other requests, and it appears to simply be lines from the Scan copied over into a text file for the most part. (The "tutorial" available on geekstogo is a bit more in-depth.)
 
After saving this to the directly where I have FRST placed, I ran the program and selected the FIX option, which ran repairs based on the lines given in the fixthis.txt file.
 
Viola! There are now no longer any problems and the browser is no longer being Hijacked by the virus. (Not sure why HiJackThis! couldn't fix it.) Nonetheless, everything appears to be working! Have restarted multiple times to verify, all browsers are no longer going to the loopback address.
 
Here is the content of my fixthis.txt file:

() C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-695141066-1470065661-4152419856-1000\...\Run: [BackgroundContainer] => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Smurfs\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: &#... Read more

Read other 3 answers
RELEVANCY SCORE 61.2

Hi,

Please, could someone help me out ( step-by-step) with how to set up a proxy server connection thru windows xp internet settings?

Thanks

Vijay

Read other answers
RELEVANCY SCORE 61.2

The problem started a few days ago. I couldn't access the internet. I reset IE & Chrome, the problem seemed to be fixed. I did notice that in Internet Options proxy was checked and when I tried to uncheck and choose Auto, it would always reset. Tried resetting the values in the registry from 0 to 1, and that only worked as long as I didn't restart. The settings always revert to proxy, and now I don't have any internet access on that machine. Please help. I'm at my wits end. Never seen anything like this. TYIA

A:Proxy settings keep resetting. No internet access.

Mods, please delete/close topic. Problem resolved.

Read other 2 answers
RELEVANCY SCORE 61.2

Woops! I posted this in tips section. Reposting here. Sorry.

I tried to find info in forum on this but couldn't.
I started out with Internet Explorer (5.) after re-istalling Win98 which worked very well and loaded quickly. Then I downloaded Netscape but did not make it my default(?).
After that, IE became slow to load and now I get the message "detecting proxy settings" and I ususally lose patience and click on home button which works but it's still so slow. I'm on DSL. I use both Netscape and Internet Explorer to view how my html appears when working on my site.
Any suggestions for this problem and what the heck does detecting proxy settings mean.
Thanks, Marianne
 

A:Internet Explorer: detecting proxy settings

I don't have DSL, just regular DUN. Does DSL create a DSL folder like DUN has? Just curious.

I would check the settings in IE, Tools>Internet Options>Connections>Settings, to see if Use a proxy server is checked. If so, uncheck it, and test IE. If not, do you have a site that you can look at for the DSL FAQ's?

Which browser do you want to be your default?
To make Internet Explorer the default Tools>Internet Options>Programs>Place a checkmark at the bottom of the page for Internet Explorer should check to see whether it is the default browser otherwise, uncheck it to make another browser the default.

[This message has been edited by EAFiedler (edited 09-10-2000).]
 

Read other 2 answers
RELEVANCY SCORE 61.2

Hi,
I'm facing a strange problem on a lot of Windows machines at my company: the Internet Explorer proxy settings keeps changing.
The proxy settings are being set by a Domain GPO, but on several machines the proxy settings revert back do "Automatically detect settings" from time to time. I'm pretty sure that the GPO is rightly configured. I just need to run
gpupdate /force to correct the proxy settings. And all machines have a up-to-dated antivirus software installed.
Now the strange thing: while using Procmon to find out which process changed the AutoConfigURL registry key, I found that
iexplore.exe process executed by itself a RegDeleteKey command to clear this key.

I've tried disabling several add-ons, but the problem is still happening. Does anyone know if there is a way to discover "what" inside IE is removing the proxy configurations? Or if something is invoking IE to do this nasty job? :P
Tks

A:Internet Explorer keeps changing proxy settings

Actually I found out what happened.
Here in Brazil almost every bank and financial institution demand us to install a security plugin to help on protecting their internet banking access. These plugins work almost independently, they update by themselves and take any necessary action without
warning the user.
And that's what happended with us: one of the most used internet banking by the employees updated its security plugin automatically, and this new version was checking if the proxy configured in IE was suspicious. Sadly, for some reason it considered
our proxy address as a threat and removed it using the RegDeleteKey command. Just some minutes after we put back the proxy address, the plugin removed it again.
This loop lasted for almost two weeks. After figuring out what was happening, I have contacted the support personel of this bank. They knew that it was a known issue, and executed a remote action to downgrade their little monster, which
solved the problem.

Read other 4 answers
RELEVANCY SCORE 61.2

I AM UNABLE TO REMOVE PROXY SETTING FROM LAN SETTING .
WHEN I UNCHECK PROXY SETTING AUTOMATICALLY AFTER CLOSE BOX,  GET CHECK AGAIN.
I TRIED TO DELETE PROXY SERVER BUT FAILED .
MY SECURITY CENTER ALSO TURN OFF AUTOMATICALLY.
HERE I ATTACHED DETAILS.
I HAVE TRIED MANY TIME TO TURN ON BY SERVICES.MSC BUT AGAIN TURN OFF.
WINDOW UPDATE ALSO SHOWING ERROR.
 
PLEASE HELP ME TO RESOLVE THIS ISSUE.

A:Can't remove PROXY Setting in Internet Settings

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===You should enable these programs if not already done.AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}Windows Firewall is disabled.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. start
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
RemoveProxy:

(Microsoft Corporation) C:\ProgramData\Windows Security\winsecurity.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Network\Dsq\network\sysnetwk.exe
() C:\ProgramData\Microsoft\Network\Dsq\browser\syshostctl.exe
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: igfxdev.dll [X]
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-1258154719-1264982004-2341163665-1001] => Proxy is enabled.
ProxyServer: [S-1-5-21-1258154719-1264982004-2341163665-1001] => http=127.0.0.1:8080;https=127.0.0.1:8080
ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction ... Read more

Read other 0 answers
RELEVANCY SCORE 61.2

Few days ago my LAN proxy settings in Internet Options>Connection tab changed and I can't able to revert the changes. It set to
HTTP: 127.0.0.1:8080
Secure: 127.0.0.1:8080
A message at the bottom displays "Some settings are managed by your system administrator". I am the only user of my PC.
I am using windows 8.1 having Internet explorer 11. I had tried all the methods to make it work correctly but not succeeded, please help me to solve this problem I can't able to connect any of the tiles apps and my internet speed also slows down. I checked out for any miscellaneous program that may got installed on my PC but didn't find any one, all are from trusted vendors.

A:Can' able to change my proxy settings in Internet Options

Hi.. I had this at work the other day .. Windows "All in One" network tools fixed this

Read other 76 answers
RELEVANCY SCORE 61.2

hi
i have windows 7 enterprise latest updated and internet explorer 10 (cant move to 11 due to compatagbility issues) .

internet explorer doesn't refinements the proxy settings.

we have set it to auto detect and it automatically gets unticked.

it is a domain environment and we are only having issues on few computers (2-3 out of 300 computers)..

on one computer even if proxy is unchecked we are still behind proxy and can browse internet while on another we cannot browse internet.
thanks

A:Internet doesnt saves proxy settings

Hi,

Check out this link. You Cannot Save Web Proxy Setting in Internet Explorer on Some Windows-Based Clients

Might help you!

Read other 6 answers
RELEVANCY SCORE 60.8

Hello,"Internet Explorer is using a proxy server on this computer to connect to the Internet." Hitman Pro gives me that message when I do a scan, and is unable to repair the problem. I did all steps suggested at this link, as that person's problem was very similar to mine:http://www.bleepingcomputer.com/forums/topic335743.html ("internet proxy?"). None of the procedures and suggestions contained at that link have worked. Also, Symantec's "Norton Power Eraser" reports two problems: m2wshlex.dll (shell extension) and deaddiskdoctor (directory).I have now done the steps at this link:http://www.bleepingcomputer.com/forums/topic34773.html ("Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help").I've pasted the DDS.txt file immediately after this, and attached the Attach.txt and Ark.txt files. Thank you very much for your assistance.DDS (Ver_10-03-17.01) - NTFSx86 Run by Administrator at 9:20:49.03 on Sun 08/29/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.288 [GMT -4:00]AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}AV: ESET Smart Security 4.0 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}FW: Online Armor Firewall *enabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}============== Running Processes ===============C:\W... Read more

A:Internet Explorer is using a proxy server on this computer to connect to the Internet

Hello dannya98, My name is Syler and I will be helping you to solve your malware issues. Sorry for the delayin replying, we are very busy at the moment.Please note because we are very busy, if I don't hear from you within 5 days the topic will be closed, If youhave since resolved your issues I would appreciate if you would let me no so I can close this topic.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart t... Read more

Read other 44 answers
RELEVANCY SCORE 60.4

Hello, i don´t know what´s happening, but i can´t change my proxy settings or uncheck the check box. Take a look at the Print Screen:
 

 Capturar.PNG   15.78KB
  0 downloads
 
I've attached the 2 FRST text files.
 
Thank you very much,
Diogo
 

Read other answers
RELEVANCY SCORE 60.4

Hello,

I have a strange issue. My computer was running fine. Then I took it to the main lobby and hooked up the internet through hard wire. It worked fine as I connected to the interent. When I went back into my office and connected to the internet I got page cannot be displayed. I cleaned out all the temporary internet stuff with ccleaner and did the clean registry, still nothing. A friend gave me hijackthis and I ran it and came up with some strange settings in proxy. So I went into interent options to try and change them, but they don't go away. I do apply, ok, and exit IE but they come right back. I used hijackthis to remove them and it worked. Unfortunately I had to do another presentation in the main lobby, same thing happened. I looked through the first steps and ran them all and can't find anything. I am running XP SP3 and have avg8 free running. I don't do any web surfing or downloading of software. Any help or ideas would be greatly appreciated.

Thanks,
Ghost

A:Internet Proxy Server Settings have bogus data

Hello, greyghostx
Welcome to TSF

My name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)
Please give me some time to look over your computer's log(s).
Please take note of the following:In the meantime, please refrain from making any changes to your computer.
Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Finally, please reply using the button in the lower left hand corner of your screen.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .

We need to create an OTViewIt ReportPlease download OTViewIt by OldTimer.
Save it to your desktop.
Double click on the icon on your desktop.
Click the "Scan All Users" checkbox.
Push the button.
Two reports will open, copy and paste t... Read more

Read other 2 answers
RELEVANCY SCORE 60.4

Last week, I downloaded a game but it put several other "programs" on my computer which were a real pain. Using Malwarebytes, I removed the programs and my computer is now pretty much back to normal.
 
However, something else that found its way onto my computer are proxy settings for each browser, basically preventing me from accessing the Internet. With Firefox, this wasn't too much of a problem because I just un-checked the Proxy settings and I can now use it again (I am using Firefox to type this thread).
 
However, unchecking the proxy settings makes absolutely no difference with Internet Explorer because it just "checks" iself again straight away. So I go to Internet Options --> Connections --> LAN settings --> uncheck proxy server and then click "OK".
 
Then as soon as I go back to LAN settings, proxy server is checked again. It is an endless loop that cannot be solved simply by unchecking the proxy server box. There is something more sinister at play here.
 
Anyone know how I can go about finding out the cause of this problem and rectifying it?
 
Thanks.

A:Proxy Settings are Preventing me from Using Internet Explorer - How to Remove?

Hello MarcusFenix -

So I go to Internet Options --> Connections --> LAN settings --> uncheck proxy server and then click "OK".

Do you complete this by ticking the Top Left Box (Automatically Detect Settings) then click APPLY and then OK > OK to exit the area ??
 
If you just untick the Proxy and click OK it will not APPLY or stay unticked.
 
Just an observation on the way you have written it.
 
If you think it is Malware related, we can also look at that ..........

Read other 1 answers
RELEVANCY SCORE 60.4

Hello, i don´t know what´s happening, but i can´t change my proxy settings or uncheck the check box. Take a look at the Print Screen:
 

 Capturar.PNG   15.78KB
  0 downloads
 
I've attached the 2 FRST text files.
 
Thank you very much,
Diogo
 

A:Canīt remove proxy 127.0.0.1:8080 Internet Settings Windows 10

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to a new file. 
Start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

GroupPolicy: Restrição <======= ATENÇÃO
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ATENÇÃO (Restrição - ProxySettings)
ProxyEnable: [HKLM] => Proxy está habilitado.
ProxyEnable: [HKLM-x32] => Proxy está habilitado.
ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
AutoConfigURL: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\diogo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-17]
CHR Extension: (Chrome Media Router) - C:\Users\diogo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-17]
S3 is... Read more

Read other 2 answers
RELEVANCY SCORE 60

Despite apparently being able to uninstall the isearch.omiga-plus.com search engine redirect malware I now find that my proxy settings are fixed as per the attached image. If I disable the proxy it is immediately reenabled. I've run malwarebytes and it reports no infections.
 
See below my FRST log.
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015
Ran by Syrene (administrator) on SYRENE-VAIO on 23-01-2015 21:24:59
Running from C:\Users\Syrene\Desktop
Loaded Profiles: UpdatusUser & Syrene (Available profiles: UpdatusUser & Syrene)
Platform: Windows 8.1 Pro (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files\Bacula\bacula-fd.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program File... Read more

A:Persistent proxy 127.0.0.1:8800 following isearch.omiga-plus.com infection

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I have given you the ìAll clear.î  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txtHKLM-x32\...\Run: [] => [X]
ProxyEnable: [HKLM] => ProxyEnable is set.
ProxyEnable: [HKLM-x32] => ProxyEnable is set.
ProxyServer: [HKLM] => http=127.0.0.1:8800;https=127.0.0.1:8800
ProxyServer: [HKLM-x32] => http=127.0.0.1:8800;https=127.0.0.1:8800
2015-01-20 19:16 - 2015-01-20 19:16 - 00003158 _____ () C:\WINDOWS\System32\Tasks\{D39D0178-3E7E-4A42-8AE9-C0120A8BD513}
2015-01-20 18:58 - 2015-01-23 18:58 - 00001712 _____ () C:\WINDOWS\Tasks\PJPCRUG.job
2015-01-20 18:58 - 2015-01-23 18:58 - 00001368 _____ () C:\WINDOWS\Tasks\CEFDUET.job
2015-01-20 18:58 - 2015-01-23 18:58 - 00001366 _____ () C:\WINDOWS\Tasks\MLKPFB.job
2015-01-20 18:58 - 2015-01-23 18:58 - 00001360 _____ () C:\WINDOWS\T... Read more

Read other 11 answers
RELEVANCY SCORE 60

I'm apologizing now if I have this posted in the wrong place or haven't dug deep enough into the forums for an answer. Also I see that I have some extra stuff in the report because I tried to do the Windows Update but couldn't and forgot to run the clean up again. My problem is that every time I connect to the internet, through any program, I have these settings again. The proxy is enabled to use 127.0.0.1 with the port 5400. I have deleted them and unchecked the boxes and clicked OK but they always come back. They are in my registry too, only when I connect though. I'm afraid to do much in the registry without advice.This all started after I did a reinstall of Internet Explorer and was looking at the Internet Options>Connections>Settings>Proxy>Advanced just to see what was in there, which was nothing. I had to check the box for "Use a proxy..." to look and when I closed out a pop up screen asked me if I was sure I didn't want a proxy and I clicked yes. So fine, I unchecked "Use a proxy..." but then wanted to look at it again. I did all the same but this time a proxy suddenly appeared out of nowhere. I noticed that my web pages were coming up faster and so left it there but then began to get spam email from Canada the next morning and got worried about it. I can't get rid of it now. I can uncheck it everytime I connect but what a pain and is it really gone? What is it up to?I did all the prep work recommended by BC, which took several hours an... Read more

A:Trouble With Proxy Server And Port Settings In Internet Tools

Hi Everyone, I found out what was making my proxy and port default every time, finally. It was my new Web Accelerator from my ISP. That is how they are enabling a faster service. But in the meantime, since I followed your preparation instructions I was able to find the other stuff that most likely caused the not so nice spam emails. I had also installed a "new" program around the same time. In the Print Shop ProPublisher 2000 ver. 10 the BitDefender scan found a Backdoor. Ralpha.A and a Brodcast Dssagent. So I had (1) Trojan.Dloader.BUP, (2) Backdoor.Ralpha.A, (1) Generic.Adw.SaveNow.56AD4696 (leftover from a downloaded screensaver, I think), (1) Brodcast DSSAGENT and (2) Trojan.Dloader.AMA's altogether. The AMA's were sticky. The BitDefender could not get them out. After a few tries, I then downloaded the CounterSpy program (4 to 5 hours on dial-up ) and was able to remove them. A tip: Run your scans again until you get a clean scan. Don't assume that all was found and deleted on the first try. So I'm hoping that all is clean as a whistle ! I hope someone can give my new Hijack This report a look and see if it is OK. Keep in mind that after doing all that scanning and coming back clean I then uninstalled the bad Print Shop ProPublisher and did some other stuff before doing the report. I did the disk clean up and Eusing Registry Cleaner to try and make a clean report. Hope it is OK. I'm wondering if the two that I've marked in red can go? Thanks for your at... Read more

Read other 6 answers
RELEVANCY SCORE 60

Hi All,

My Proxy Settings keep going to reset after restart every time in Internet Explorer 11 and every time i need to set Proxy again.
Proxy is going reset to automatically detect!

Can some help me urgent to resolve this issue.

Read other answers
RELEVANCY SCORE 60

Hi everyone,
 
Here is my issue, my computer is functioning ok except for internet explorer. I am able to google and search things but when I try to enter a number of different sites (such as the malwarebytes download page) I receive a message that says "the proxy server isn't responding." "Check your proxy settings 127.0.0.1:8877." When I go into internet options --> Connections----> Lan Settings, the "user proxy server for your lan" is checked and greyed out. I have run malwarebytes which did not fix the issue. Someone mentioned checking a proxy setting in regedit which was set to 1, when I change it to 0 as I was recommended, It did not fix the issue and simply reverted to 1. Im not sure if that is relevant at all but this issue is quite frustrating and any help you could provide would be greatly appreciated.
 
Thanks!
 

A:Internet Explorer says "The Proxy Server Isn't responding" and settings locked

Hello,
Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.
Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.
If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Read other 2 answers
RELEVANCY SCORE 60

Hi,
How do i find who has modified proxy settings in Windows 7 Enterprise Edition. 

Is there any event logs to verify

Please help me

Regards,
Boopathi S

A:event logs for internet explorer for proxy settings change

Hi, 
I am sorry to say that there is no official method to implement what you would like. 
Thanks for understanding.Kate Li
TechNet Community Support

Read other 2 answers
RELEVANCY SCORE 60

I have spent the past year in China and while I was there I had to use some sort of proxy service (Freegate, FreeU, etc.) if I wanted to access certain websites (ie facebook, twitter, blogspot). I am on vacation in the US now and still cannot access these websites sans proxy - almost like China has hacked my computer!

I joke, but this is really annoying. I have cleared my history, cookies, cache, and deleted all proxies. The problem exists on all of my browsers so it has to be with my connection. I have "Automatically Detect Proxies" checked under LAN settings, though I have tried unchecking it. No matter what I do I get the "This connection has timed out" error Firefox. Also, when I try accessing these sites through Chrome it says "Resolving Proxy" in the lower left corner, so I think it somehow is still searching for that proxy and thinks it needs it to access these sites.

I'm clueless and would appreciate any ideas - thanks!
 

A:Solved: Help with proxy settings and internet access post-China

Read other 12 answers