LAN proxy settings acting funky.

[Ausar]

So I turned off my "use a proxy server" option under LAN settings in win 7 a while back. It helps with the downloads. But I went back to it and it was checked. I unchecked it and a duplicate window pops up, checks the same setting, then closes. After several attempts I managed to hit the X to close it but then everything freezed. Still had audio but video was frozen for a good 15 seconds. I had to three finger salute (ctrl alt del) but all my displays just went black for 10 seconds at least. I got to the task manager but everything was super laggy until after those windows closed. Kinda freaked out. No viruses that I can tell from malwarebytes. Any ideas/fixes?

 

[tman1]

Malwarebytes doesn't detect everything.

Try running ADWCleaner and combofix

 

[Ausar]

Malwarebytes doesn't detect everything.

Try running ADWCleaner and combofix

Ran both. Found stuff but didn't fix.

 

[Ausar]

Just to confirm I have scanned several times and run multiple test and it still is keeping that box checked. I really am getting worried.

 

[tman1]

Windows key + R

Type in "Regedit" without quotes

Press enter

Navigate to the following and make sure they are disabled.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\
"MigrateProxy"=dword:00000001

1 for enable 0 for disable


"ProxyEnable"=dword:00000000

1 for enable 0 for disable


"ProxyHttp1.1"=dword:00000001

1 for enable 0 for disable Might also be "ProxyHttp1_1" on some machines


"ProxyServer"="" This is blank (if there's a value Delete it)


If the registry Keys above aren't shown Add them.

Right click New>DWORD(32-bit Value)

give it its name, right click and Modify... type in its value from above.

 

[Ausar]

Windows key + R

Type in "Regedit" without quotes

Press enter

Navigate to the following and make sure they are disabled.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\
"MigrateProxy"=dword:00000001

1 for enable 0 for disable


"ProxyEnable"=dword:00000000

1 for enable 0 for disable


"ProxyHttp1.1"=dword:00000001

1 for enable 0 for disable Might also be "ProxyHttp1_1" on some machines


"ProxyServer"="" This is blank (if there's a value Delete it)


If the registry Keys above aren't shown Add them.

Right click New>DWORD(32-bit Value)

give it its name, right click and Modify... type in its value from above.

Thank you for the detailed response. However, as soon as I changed the ProxyEnable value to 1 the connections window popped up again and check it. I looked back at the value and it was 1 again.

 

[tman1]

Do you mean, when you changed the value to 0?

 

[Ausar]

Do you mean, when you changed the value to 0?

Yes. As soon as I hit "ok" after changing it, the connections Window popped up and checked the proxy setting.

 

[Ausar]

Also don't know why it selected that as the best answer. I don't think I clicked it lol.

 

[tman1]

Look here: http://answers.microsoft.com/en-us/ie/forum/ie11-iewindows8_1/lan-connection-settings-keep-changing-back-to/76a0f5d2-167f-41fa-bf40-1461b8c01642?auth=1

Try starting where it says "Still not working"

And go from there.

 

[Ausar]

Look here: http://answers.microsoft.com/en-us/ie/forum/ie11-iewindows8_1/lan-connection-settings-keep-changing-back-to/76a0f5d2-167f-41fa-bf40-1461b8c01642?auth=1

Try starting where it says "Still not working"

And go from there.

I just got around to trying this and it worked for about 1 minute. Then the typical lan connections popped up and checked the proxy settings. It did take longer for it to pop up but the issue persists nonetheless.

 

[tman1]

Ok, you have to have something in your system to be causing this.

Download and run TDSS killer, rkill, and combofix again.