script at the IE:http://wpad.com.gr/proxy.pac

[I7210I]

hello
I saw at me IE11 that there is times(I don't know when exactly cause I don't do actually something for these) at the tools>internet options>connections>LAN settings that there is some script in grey scale now : http://wpad.com.gr/proxy.pac I looked at google and tried to do some anti virus check + malware bytes check and I didn't find anything suspicious , I know that there is a problem cause I can't delete the script.
what to do next?
thank you

 

[spanishguy17]

Looks like you're infected. You'll want to run rkill, then RogueKiller, then MBAR and finally AdwCleaner. This should get rid of the meat of the infection.

You might consider disabling unknown startup items with autoruns. Be careful with what you disable, though, as it could cause certain programs to not operate correctly.

After doing that, also reset Chrome to default settings. Do the same for any other browser you have installed.

Check Control Panel -> Internet Options -> Connections -> LAN Settings and make sure you don't have a malicious proxy in use.
Just ggogle the names of the programs named above and you will find them easily.

 

[I7210I]

thank you for your answer
the log of the rkill is:

Rkill 2.8.2 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2015 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 11/06/2015 01:02:39 PM in x64 mode.
Windows Version: Windows 8.1 Enterprise

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 11/06/2015 01:02:50 PM
Execution time: 0 hours(s), 0 minute(s), and 11 seconds(s)


the Roguekill found the mbaR it's self as a a problem so I did uninstall and install a new one
and then check everything and it's ok, after these I checked with the AdwCleaner and it found nothing it's look like everything is ok but I can't delete the proxy setting.
at the startup section I know what is going there and there is no something species .
about the reset setting I did it, and the proxy still live there without working but still there.