Adlice forum

Software feedback => RogueKiller => Topic started by: nitrousable on July 14, 2016, 04:01:37 AM

Title: PUM Proxies
Post by: nitrousable on July 14, 2016, 04:01:37 AM

[PUM.Proxy] (X64) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-01-02-03-04-05 -> Found
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\18-1e-78-4f-62-5e -> Found
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-01-02-03-04-05 -> Found
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\18-1e-78-4f-62-5e -> Found

Any idea what are these and where did they come from? Latest version RogueKiller detected those.


wpad is supposedly some sort of an auto proxy detection tool in Windows. I've looked up the timestamps for these entries and found out that one of them was created yesterday at the time when I launched my torrenting program. Are these entries dangerous or not?
Thanks


http://kb.k12usa.com/Knowledgebase/Proxy-Auto-Detect-WPAD-Issues-With-IE-Windows-7 - here is a topic on wpad

Title: Re: PUM Proxies
Post by: Curson on July 14, 2016, 06:38:27 PM

Hi nitrousable,

These entries are false positives.
This will be fixed in RogueKiller next release.

Regards.