Adlice forum

General Category => Malware removal help => Topic started by: waynep02 on March 07, 2016, 07:51:14 PM

Title: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 07, 2016, 07:51:14 PM

I have run Rogue killer several times and deleted the proxy 127.0.0.1 and it says it is deleted but after I resart my pc it is right back in the proxy settings and the manual proxy setting and it is turned on and auto detect proxy setting is off and when this happens I can't get to certain sites and have to go into settings in the network and turn off manual proxy setting and turn on automatic. Do I have to buy the pro version to get this to work? I even tried running rogue in the safe mode and got the same results. :-[

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 07, 2016, 08:01:12 PM

Hi waynep02,

Please copy/paste RogueKiller full report in your next reply.

Regards.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 07, 2016, 08:37:32 PM

I hope this is what you want.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 07, 2016, 08:43:50 PM

Hi waynep02,

At first sight, it seems to be legit.
Please download Farbar Recovery Scan Tool (x64) (http://download.bleepingcomputer.com/farbar/FRST64.exe) and save it to your Desktop.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please attach log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also attach that along with the FRST.txt into your reply.

Regards.

Title: reports
Post by: waynep02 on March 07, 2016, 11:48:36 PM

Here they are.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 08, 2016, 01:04:15 AM

Hi waynep02,

I merged the topic you just created into this one. Please stay on it.
Uninstall the following softwares using Add/Remove programs (if present) :

Quote

Cstart8
Fix Windows 10
TweakBit
CouponPrinterPlugin
Digital Coupon Printer
Duplicate Cleaner Free
Duplicate Cleaner Pro

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

How is the computer running now ? Are the proxy entries still present ?

Regards.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 08, 2016, 04:29:20 PM

I deleted cstart8, coupon printer plugin, digital coupon cleaned and both duplicate cleaners. I downloaded the fixlist.txt file, I ran FRST64 but my trend micro security software stoped everything. I turned it off and did it all over again so I don't know it that screwed it up or not. It is still there. I am attaching everything generated.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 08, 2016, 11:52:02 PM

Hi waynep02,

Could you please attach the Fixlog.txt report in your next reply ?

Regards.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 09, 2016, 05:57:05 AM

Here it is

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 09, 2016, 06:20:10 PM

Hi waynep02,

On computer is now clean.
You can now delete FRST and the files related to it.

Regards.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 09, 2016, 06:46:55 PM

I don't know why you think it is clean, maybe you could tell me or show me but it still restarts in the manual proxy setting checked. I also included an Rkill txt for you to see. I have to go in and turn off manual and turn on automatic. Do you think the pro version would help me out of this mess?

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 09, 2016, 07:52:57 PM

Hi waynep02,

Since your system is now clean, according to the logs, I'm deducing that the proxy is used for legit purposes (antivirus, filtering, etc.)

Regards.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: waynep02 on March 11, 2016, 10:00:10 PM

I found my problem with the 127.0.0.1 proxy. It was caused by a program called e-Rewards Plus. I deleted it and the 127 proxy is gone. Thanks for the help.

Title: Re: Trying to remove proxy 127.0.0.1, but it comes right back after restart.
Post by: Curson on March 11, 2016, 10:04:31 PM

Hi waynep02,

Thanks for your feedback.
You are welcome.

Regards.