Please help virus in my pc :\

Status
Not open for further replies.

rishab2000

Commendable
Jun 2, 2016
100
0
1,690
so, idiotically today I downloaded a file and tried installing it not knowing that it's a virus and ever since then my Internet on my computer has been down it took me a while to notice what was the cause but then I found out that the root was because the proxy kept shifting to 127.0.0.1:8080
I tried using adw cleaner and also tried changing registry entries but they didn't help it just kept shifting, can anyone help me fix this please?
I'm I'm deep trouble if I don't fix this...
 
Solution
try a full virus scan and malwarebytes scan, you might also want to check that the hosts file in c:\windows\system32\drivers\etc (if C is your main drive) to see if it has any strange entries in it, follow this microsoft guide to put it back to normal

codygriffy

Distinguished
Jan 4, 2013
285
0
18,860


Easiest fix is just to reinstall windows. If this isn't an option. Immediately download these.

1. Free Anti-Virus : http://www.pandasecurity.com/usa/homeusers/solutions/free-antivirus/

2. Free Malware Remover: https://www.malwarebytes.com/

3. Install them from windows. I'm not sure if you can install them in safe mode which is the next step.

4. Restart in safe mode by tapping Delete key during windows splash menu / or right after the splash when you see the - - - flashing on the black screen.

5. Once you are in safe mode. Run through a full scan of both Panda and Malwarebytes and that should take care of the problem.
 

rishab2000

Commendable
Jun 2, 2016
100
0
1,690


there was a few problems with the host i think but i fixed that , fixed the registry entries cleaned it with adwcleaner now cleaning using mbab and hitman
 

rishab2000

Commendable
Jun 2, 2016
100
0
1,690

i have quickheal im cleaning with mbab and hitman and adwcleaner found a lot of problems almost 23 and i pressed clean and it did ,i think , then i resterted the problem still persisted and then i went to safe mode and altered the regedit entries and deleted proxyserver and turned proxy to 0 and no reinstalling is nnot an option :?
 

bobmanuk

Honorable
Jan 18, 2014
275
1
10,960
thats all well and good, but each different virus will do something different, do things in its own way, if you know exactly what the virus is called then there will be specific instructions for removing it.
 

rishab2000

Commendable
Jun 2, 2016
100
0
1,690

if i send you the file will you be able to find out ? btw i think i mightve fixed it i tried using hitman ,even though on reboot it said failed i cant see any attempts made to reset the proxy . but still im worried . alll i know is that its a proxy hijack there were a bunch of applications installed along with it plus a few browser hijacks
 

rishab2000

Commendable
Jun 2, 2016
100
0
1,690
http://www.malwareremovalguides.info/remove-pum-bad-proxy-removal-guide/ i followed this guide
but before that I used adw cleaner ,malware bytes and JRT :) thank you guys for alll the help :)
 

codygriffy

Distinguished
Jan 4, 2013
285
0
18,860


Well hopefully it worked!
 
Just in case you're still having the issue, this should definitely help.

Remove Http://127.0.0.1:8080/proxy.pac virus
http://www.2-remove-virus.com/remove-http127-0-0-18080proxy-pac-virus/


Proxy changer and DNS changer are similar and mostly the same tools are used to remove either. If proxy virus removal instructions don't help solve the issue, see if the DNS change removal guide works.


DNS Changer malware: how to check if you're infected, and how to fix it
http://www.wired.co.uk/article/dns-changer-check-and-fix

Removal tools:
- McAfee Stinger
- Windows Defender Online
- Microsoft Safety Scanner
- Norton Power Eraser
- Trend Micro HouseCall
- MacScan
- Avira DNS Repair Tool
- Kaspersky Anti-rootkit utility TDSSKiller


How can you detect if your computer has been violated and infected with DNS Changer?
http://www.dcwg.org/detect/




 
Status
Not open for further replies.