Author Topic: Trying to remove proxy 127.0.0.1, but it comes right back after restart.  (Read 5968 times)

0 Members and 1 Guest are viewing this topic.

March 07, 2016, 07:51:14 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
I have run Rogue killer several times and deleted the proxy 127.0.0.1 and it says it is deleted but after I resart my pc it is right back in the proxy settings and the manual proxy setting and it is turned on and auto detect proxy setting is off and when this happens I can't get to certain sites and have to go into settings in the network and turn off manual proxy setting and turn on automatic. Do I have to buy the pro version to get this to work? I even tried running rogue in the safe mode and got the same results. :-[

Reply #1March 07, 2016, 08:01:12 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

Please copy/paste RogueKiller full report in your next reply.

Regards.

Reply #2March 07, 2016, 08:37:32 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
I hope this is what you want.

Reply #3March 07, 2016, 08:43:50 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

At first sight, it seems to be legit.
Please download Farbar Recovery Scan Tool (x64) and save it to your Desktop.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please attach log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also attach that along with the FRST.txt into your reply.
Regards.

Reply #4March 07, 2016, 11:48:36 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
reports
« Reply #4 on: March 07, 2016, 11:48:36 pm »
Here they are.

Reply #5March 08, 2016, 01:04:15 am

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

I merged the topic you just created into this one. Please stay on it.
Uninstall the following softwares using Add/Remove programs (if present) :
Quote
Cstart8
Fix Windows 10
TweakBit
CouponPrinterPlugin
Digital Coupon Printer
Duplicate Cleaner Free
Duplicate Cleaner Pro

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

How is the computer running now ? Are the proxy entries still present ?

Regards.

Reply #6March 08, 2016, 04:29:20 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
I deleted cstart8, coupon printer plugin, digital coupon cleaned and both duplicate cleaners. I downloaded the fixlist.txt file, I ran FRST64 but my trend micro security software stoped everything. I turned it off and did it all over again so I don't know it that screwed it up or not. It is still there. I am attaching everything generated.

Reply #7March 08, 2016, 11:52:02 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

Could you please attach the Fixlog.txt report in your next reply ?

Regards.

Reply #8March 09, 2016, 05:57:05 am

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
Here it is

Reply #9March 09, 2016, 06:20:10 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

On computer is now clean.
You can now delete FRST and the files related to it.

Regards.

Reply #10March 09, 2016, 06:46:55 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
I don't know why you think it is clean, maybe you could tell me or show me but it still restarts in the manual proxy setting checked. I also included an Rkill txt for you to see. I have to go in and turn off manual and turn on automatic. Do you think the pro version would help me out of this mess?

Reply #11March 09, 2016, 07:52:57 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

Since your system is now clean, according to the logs, I'm deducing that the proxy is used for legit purposes (antivirus, filtering, etc.)

Regards.

Reply #12March 11, 2016, 10:00:10 pm

waynep02

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
    • View Profile
I found my problem with the 127.0.0.1 proxy. It was caused by a program called e-Rewards Plus. I deleted it and the 127 proxy is gone. Thanks for the help.

Reply #13March 11, 2016, 10:04:31 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2459
  • Reputation:
    84
    • View Profile
Hi waynep02,

Thanks for your feedback.
You are welcome.

Regards.