Unwanted proxy exceptions

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

SlightlyLost

Thread Starter
Joined
Feb 8, 2005
Messages
2
I'm using a dial up provider called BasicISP.com (they seem fine, and cheap)
They provide a branded version of SlipStream, called HiSpeed.exe

When activated, of course it acts as a proxy pointing to 127.0.0.1:5400.
No Problem, works like a champ. Been on this package for ~45 days.

While tackling another issue, I had occasion to wander through my proxy exception list:

(Internet Options>Connections>Lan Settings>Advanced>Exceptions)

And I was amazed at the long list I found.
Dialers and XXX and advert.com, oh my! :eek:
Full list is pasted below.

This list comes and goes as the HiSpeed.exe is started and stopped. Of course my first thought was that BasicISP had placed this rubbish in their HiSpeed package.

As a test I installed HiSpeed on a clean machine, started it up, and nope! None of the garbage in the exceptions list.

I'm using Sygate firewall, NOD32 antivirus, and have scanned with Ad-Aware, Spybot and MS AntiSpyware, all of which give me a clean bill of health. WinXP SP2, clean install only about twenty days old. (sigh)

Any thoughts?

I'm reasonably sure I must have picked up something while surfing, but damned if I can find it. IE Security set to high now, and having used Maxthon browser (MyIE) over IE for years, Firefox is just too underdeveloped just yet.

Thanks for any assistance-

========Begin pasted list=========

;127.0.0.1:5400;*windowsupdate.microsoft.com;*windowsupdate.com;
download.microsoft.com;codecs.microsoft.com;activex.microsoft.com;
c15.chatsupportlive.com;localhost;000freexxx.com;0190-dialer.com;
08.185.87.0.liveadvert.com;08.185.87.00.liveadvert.com;
08.185.87.01.liveadvert.com;08.185.87.02.liveadvert.com;
08.185.87.03.liveadvert.com;08.185.87.04.liveadvert.com;
08.185.87.05.liveadvert.com;08.185.87.06.liveadvert.com;
08.185.87.07.liveadvert.com;08.185.87.08.liveadvert.com;
08.185.87.09.liveadvert.com;08.185.87.1.liveadvert.com;
08.185.87.10.liveadvert.com;08.185.87.100.liveadvert.com;
08.185.87.101.liveadvert.com;08.185.87.103.liveadvert.com;
08.185.87.104.liveadvert.com;08.185.87.105.liveadvert.com;
08.185.87.106.liveadvert.com;08.185.87.107.liveadvert.com;
08.185.87.108.liveadvert.com;08.185.87.109.liveadvert.com;
08.185.87.11.liveadvert.com;08.185.87.110.liveadvert.com;
08.185.87.111.liveadvert.com;08.185.87.113.liveadvert.com;
08.185.87.114.liveadvert.com;08.185.87.115.liveadvert.com;
08.185.87.116.liveadvert.com;08.185.87.117.liveadvert.com;
08.185.87.118.liveadvert.com;08.185.87.119.liveadvert.com;
08.185.87.13.liveadvert.com;08.185.87.130.liveadvert.com
 
Joined
Feb 3, 2005
Messages
33
First off contact you ISP to make sure but at the company i work for we do not use a proxy exclusion list. so in theory you could just set it to not use one.
 

SlightlyLost

Thread Starter
Joined
Feb 8, 2005
Messages
2
RE: AdAware version is the SE version, updated prior to scanning

RE: Hijack This - Log posted below

RE: Contacting the ISP on a support issue - They haven't figured out configuring Dnews yet, I'm not sure I want to overly tax them.... But hey, they're cheap and they don't require proprietary software shells like earthlink or netscape (blech! aol by any other name...) require to get the use of SlipStream.

Also worth noting, HiJack This 1.99 is not reporting on the registry string where the proxy exception is actually set. I can disable hispeed.exe then refresh my view in regedit and the settings are, of course, gone. I can also edit them directly when hispeed is running, and remove the nasties. They DO return after restarting hispeed. The string is:

HKEY_USERS\S-1-5-21-861567501-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride


Last interesting item: I have installed HiSpeed.exe and surfed the net with it on four other known clean machines now. None of them are having this proxy exception issue. Frankly, it's not the end of the world, but it's a heckuva puzzle. I would really like to know what I picked up that's could do this, and how.


========paste============
Logfile of HijackThis v1.99.0
Scan saved at 9:35:23 PM, on 2/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINXP\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINXP\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\Program Files\BasicISP\HiSpeed\hispeed.exe
C:\hjt199\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5400
O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Program Files\BasicISP\HiSpeed\PBHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [ClipCache] C:\Program Files\ClipCache\clipc.exe /wait 3
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: BasicISP HiSpeed.lnk = C:\Program Files\BasicISP\HiSpeed\hispeed.exe
O8 - Extra context menu item: Do&wnload by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_Link.htm
O8 - Extra context menu item: Download A&ll by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_All.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Show All Original Images - res://C:\Program Files\BasicISP\HiSpeed\hispeed.exe/250
O8 - Extra context menu item: Show Original Image - res://C:\Program Files\BasicISP\HiSpeed\hispeed.exe/227
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.MyBasicISP.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{E52651F1-06BF-489E-8766-EFD747FAC8AA}: NameServer = 205.171.3.65 205.171.2.65
O23 - Service: NOD32 Kernel Service - Unknown - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Sygate Personal Firewall - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

=========/paste==========
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top