Proxy http=127.0.0.1:6061;https=127.0.0.1:6061 unable to disable

Solved
Eraknix -  
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   -
Hello, I found a proxy that keeps activating even when I disable it. I tried using AdwCleaner but it didn't work. Could you please help me?

5 réponses

Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
CCleaner is not really useful, even though it's recommended everywhere.
You should uninstall it.
If you want to keep it, disable CCleaner's monitoring, which is unnecessary, as it starts up with Windows and slows it down with its incessant cleaning, see: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/

Here is the correction to be made with FRST. You can use this explanatory note with screenshots for help.
Restart FRST then press CTRL + Y on your keyboard.
The notepad will open, copy/paste this.

Start:
CloseProcesses:
CreateRestorePoint:
EmptyTemp:
RemoveProxy:
Reboot:
End:


Save the content from the file menu then save.

Close the notepad, go back to FRST and click on the "Fix" button
A restart may be necessary and automatic.
A text file will appear, copy/paste the content here in a new message.

Restart the computer.

2°)
Finish with a cleanup using Malwarebytes - Malwarebytes Anti-Malware free version tutorial

--
Please press any key to continue the disinfection...
2
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Good evening,

To check your computer for potential infections and have a general overview of the system:

Follow the FRST tutorial by clicking on this blue link. ( Take your time to read carefully - everything is well explained there ).

Download and run the FRST scan,
Wait for the scan to finish, a message will indicate that the analysis is complete.

Three FRST reports will be generated:
  • FRST.txt
  • Shortcut.
  • Additional.txt


Send these 3 reports to the website https://pjjoint.malekal.com/ and return with the 3 pjjoint links leading to the reports here in a new response so that we can consult them.

(The blue links lead to step-by-step explanatory tutorials, click on them for more precise instructions to follow).

--
Please press any key to continue the disinfection...
1
Eraknix Posted messages 6 Status Membre
 
0
Eraknix Posted messages 6 Status Membre
 
Hello, I had previously removed CCleaner from startup. Here is the message from FRST:

Results of the Farbar Recovery Scan Tool (x64) Version: 05-08-2019
Executed by Girard (06-08-2019 09:59:23) Run:1
Executed from C:\Users\Girard\Desktop
Loaded profiles: Girard (Available profiles: Girard)
Boot Mode: Normal
==============================================

fixlist content:
Start:
CloseProcesses:
CreateRestorePoint:
EmptyTemp:
RemoveProxy:
Reboot:
End:

Processes closed successfully.
The restore point was created successfully.

========= RemoveProxy: =========

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => successfully removed
"HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser" => successfully removed
"HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable" => successfully removed
"HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => successfully removed
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully removed
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully removed
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully removed
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully removed
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully removed
"HKU\S-1-5-21-134988227-1139945981-3308532545-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable" => successfully removed
"HKU\S-1-5-21-134988227-1139945981-3308532545-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => successfully removed
"HKU\S-1-5-21-134988227-1139945981-3308532545-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully removed
"HKU\S-1-5-21-134988227-1139945981-3308532545-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully removed

========= End of RemoveProxy: =========

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31821848 B
Java, Flash, Steam htmlcache => 133167 B
Windows/system/drivers => 11379850 B
Edge => 1313975 B
Chrome => 357161107 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 4220 B
LocalService => 0 B
NetworkService => 9771968 B
NetworkService => 0 B
Girard => 74111934 B

RecycleBin => 108 B
EmptyTemp: => 469 MB of temporary data deleted.

================================

The system had to restart.

End of Fixlog 09:59:53

I installed Malwarebytes, I did the cleanup and it found 23 items, I deleted them and now when I go to proxy settings, there's nothing there! Thank you for your help.
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
You're welcome and be careful what you download :)

--
Please press a key to continue the disinfection...
0