PUM.Proxy even after Format + full Windows Re-Installation

[Boulz]

Hi,

Yesterday evening I saw this PUM.Proxy for the first time on win10 (see attachment)

If I delete them at the end of the scan and re-scan, they disappear.

But once I reboot, they come back...

So I format the drive and reinstall Windows 8. At the end of the installation, Roguekiller find them again...I update to Windows 10. and they are still here ....

Please help me. I am in France, we can discuss by phone if you want. Thanks

[Curson]

Hi Boulz,

Welcome to Adlice.com Forum and thanks for supporting our product.
It may be a false positive.

Please follow the following process :
1) Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

reg export "HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad" "%USERPROFILE%\Desktop\WPAD.txt"

Do not close the command prompt until it says "Operation Completed

2) A new file named WPAD.txt should has been created on your desktop. Please attach it with your next reply.

Regards.

Note : This thread has been moved to the "RogueKiller PREMIUM" section for clarity.

[Boulz]

Hi Curson,

Many thanks for your support

I attach the WPAD.txt  - UPDATE, I PUT THE CORRECT FILE ---

Sorry..

[Curson]

Hi Boulz,

The WPAD key doesn't contains any malicious content.
There must be an application on your system that restore it on startup.
I advice you to ignore it for now.

Regards.

[Boulz]

What I dont understand is :

I formated my 2 x HDD + re-install Windows.
As soon as Windows install finish, I run Roguekiller and it found me these PUP.proxy

I have the original CD Windows 8 = directly find me these PUP after fresh install.
I upgrade to Windows 10 = same

I tried on each HDD and disconnect the 2nd

How is it possible ?

[Curson]

Hi Boulz,

On my personal computer, the WPAD key is empty.
It's maybe related to your network configuration, but there is no way to be sure.

Regards.

[Boulz]

ok

Could you tell me how to remove these WPAD keys? please ?

I notice, my max download is stuck at 750 KB/s max 810 with this new Windows install and this PUP-Proxy problem.

Normally it's stable at 900-950

This is why I want to remove these WPAD keys

[Curson]

Hi Boulz,

These keys should not mess with your download speed.
Anyway, if you want to delete them, please follow the following process.

1) Download attached reg.txt and save it on your desktop.
2) Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

reg import "%USERPROFILE%\Desktop\reg.txt" Please keep in mind there is a high probably these keys will be restored on reboot.

Regards.