1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Plz help proxy messing up comp

Discussion in 'Virus & Other Malware Removal' started by annieskid25, Mar 10, 2015.

Thread Status:
Not open for further replies.
Advertisement
  1. annieskid25

    annieskid25 Thread Starter

    Joined:
    Aug 10, 2007
    Messages:
    33
    First Name:
    Nancy
    My daughters comp has picked up a proxy somewhere along the way and it wont even let us go to CNET to run hijack this or to techguy.org so I'm writing this on my comp instead of hers. Running window 8, using googles, tried to get rid of proxy that's messing up everywhere online and not sure what's next if we've unchecked allow remote access and use proxy in settings already and that didn't fix it. May need to be wiped but we're trying to avoid it. thanks.:)
     
  2. dbreeze

    dbreeze Malware Specialist

    Joined:
    Oct 5, 2014
    Messages:
    431
    First Name:
    David
    Hi annieskid25,

    Welcome to Tech Support Guy. My name is dbreeze and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:
    • Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.
    • All of the assistants and staff at Tech Support Guy are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date.
    • Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.
    • If any of the security programs on your system should give any warnings about the software tools I ask you to download and use, please do not be alarmed.All of the tools I will have you use are safe to use (as instructed) and malware free.
    • While we strive to disrupt your system as little as possible, things happen.If you can, it would be best to back up your personal files now (if you do not already have a backup). You can store these on a CD/DVD, USB drive or stick, anywhere but on your same system. This will save you from possible anguish later if something unforeseen happens.
    • Please do not run any other tools or scanners than what I ask you to.Some of the openly available software made for malware removal can make changes to your system that interfere with the cleaning of the malware, or even destroy your system. I will use only what the situation calls for and direct you in the proper use of that software.
    • Please do not attach any log files to your replies unless I specifically ask you.Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.

      - Save ALL Tools to your Desktop-
      All the tools that I will have you download should be placed on the desktop unless otherwise stated. If you are familiar with how to save files to the desktop then you can skip this step.

      Since you are continuing with this step then I assume you are unfamiliar with saving files to your desktop. As a result it's easiest if you configure your browser(s) to download any tools to the desktop by default. Please use the appropriate instructions below depending on the browser you are using.
      [​IMG]Google Chrome - Click the "Customize and control Google Chrome" button in the upper right-corner of the browser.[​IMG] Choose Settings. at the bottom of the screen click the
      "Show advanced settings..." link. Scroll down to find the Downloads section and click the Change... button. Select your desktop and click OK.
      [​IMG]Mozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser. [​IMG] Choose Options. In the downloads section, click the Browse button, click on the Desktop folder
      and the click the "Select Folder" button. Click OK to get out of the Options menu.
      [​IMG]Internet Explorer - Click the Tools menu in the upper right-corner of the browser. [​IMG] Select View downloads. Select the Options link in the lower left of the window. Click Browse and
      select the Desktop and then choose the Select Folder button. Click OK to get out of the download options screen and then click Close to get out of the View Downloads screen.
      NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.
    Let's get started....

    Notice that the above information on the desktop is for the infected machine. We will use the working machine to load some programs onto a USB stick / drive and run the programs on the infected machine. Follow the steps below please >>>>

    FIRST

    Download MCShield to your desktop of the working system and install it.
    It will initially run a scan and show the result as a toaster by the system clock
    Then in the control centre select scanner and tick unhide items on flash drives
    [​IMG]
    Plug in the USB drive and McShield will start a scan
    Once it is finished, copy the McShield_setup.exe file onto the USB drive.
    Remove the USB drive from the working system and attach it to the infected one. Copy the McSield_setup.exe file to the infected system and install it.
    Let it scan the infected system and when done, go to the control centre, select scanner and tick unhide items on flash drives
    Select logs and then copy/paste it to your next post (if you want to)

    SECOND >>>>

    Return the USB drive to the working machine.

    Please download Farbar Recovery Scan Tool 32bit and save it to your USB drive.

    Please download Farbar Recovery Scan Tool 64bit and save it to your USB drive.

    Remove the drive and attach it to the infected system. Copy both FRST.exe and FRST64.exe to the desktop of the infected machine. Only one of these files will run on the system; one is 32 bit the other is 64 bit. In the below directions, try one file and if there is no error message then it is the correct version and you can delete the other.

    • Right click the FRST file on your desktop and select "Run as Administrator..." (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
    • If an update is available, the program will inform you and download the update. Allow it do this please.
    • Once the tool shows "The tool is ready to use." message, please press the Scan button.
    • It will produce a log called FRST.txt in the same directory the tool is run from.
    • Please copy and paste log back here.
    • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

    Once the scan is done, please copy both the FRST.txt log file and the Addition.txt log file (both should be on the desktop) on to the USB drive. Return the USB drive to the working machine and post the logs here in a reply post.

    Again, if you have any questions about these instructions or any problems happen, stop and ask here for help.
     
  3. annieskid25

    annieskid25 Thread Starter

    Joined:
    Aug 10, 2007
    Messages:
    33
    First Name:
    Nancy
    Ill need to go get flash drive soon meanwhile, possible problem with my computer , should I post a new thing on forums? hijackthis log couldn't access the hosts file, and I saved the list to notepad, if u want that instead.
    Downloaded avg antivirus, and having fun with that for now.
     
  4. dbreeze

    dbreeze Malware Specialist

    Joined:
    Oct 5, 2014
    Messages:
    431
    First Name:
    David
    Post a new thread but I will tell you right now that we no longer use HiJackThis as it has not really been updated for the new OS. Please download FRST and run that. I will look for the thread and pick it up when you post it. (We do ask that there be only one system to work on per thread.)
     
  5. annieskid25

    annieskid25 Thread Starter

    Joined:
    Aug 10, 2007
    Messages:
    33
    First Name:
    Nancy
    every time I try to run it windows tries to protect me and wont let it run, frst file. is that supposed to happen?
     
  6. dbreeze

    dbreeze Malware Specialist

    Joined:
    Oct 5, 2014
    Messages:
    431
    First Name:
    David
    If that is Win 8/8.1 Smart Screen filter, then click on More Info and then Run Anyway. Also, are you right clicking on the file and selecting to "Run as Administrator"?
     
  7. dbreeze

    dbreeze Malware Specialist

    Joined:
    Oct 5, 2014
    Messages:
    431
    First Name:
    David
    Just a bump to see if you still need any help on this?
     
  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1144497

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice