1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Unwanted proxy exceptions

Discussion in 'Web & Email' started by SlightlyLost, Feb 8, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. SlightlyLost

    SlightlyLost Thread Starter

    Joined:
    Feb 8, 2005
    Messages:
    2
    I'm using a dial up provider called BasicISP.com (they seem fine, and cheap)
    They provide a branded version of SlipStream, called HiSpeed.exe

    When activated, of course it acts as a proxy pointing to 127.0.0.1:5400.
    No Problem, works like a champ. Been on this package for ~45 days.

    While tackling another issue, I had occasion to wander through my proxy exception list:

    (Internet Options>Connections>Lan Settings>Advanced>Exceptions)

    And I was amazed at the long list I found.
    Dialers and XXX and advert.com, oh my! :eek:
    Full list is pasted below.

    This list comes and goes as the HiSpeed.exe is started and stopped. Of course my first thought was that BasicISP had placed this rubbish in their HiSpeed package.

    As a test I installed HiSpeed on a clean machine, started it up, and nope! None of the garbage in the exceptions list.

    I'm using Sygate firewall, NOD32 antivirus, and have scanned with Ad-Aware, Spybot and MS AntiSpyware, all of which give me a clean bill of health. WinXP SP2, clean install only about twenty days old. (sigh)

    Any thoughts?

    I'm reasonably sure I must have picked up something while surfing, but damned if I can find it. IE Security set to high now, and having used Maxthon browser (MyIE) over IE for years, Firefox is just too underdeveloped just yet.

    Thanks for any assistance-

    ========Begin pasted list=========

    ;127.0.0.1:5400;*windowsupdate.microsoft.com;*windowsupdate.com;
    download.microsoft.com;codecs.microsoft.com;activex.microsoft.com;
    c15.chatsupportlive.com;localhost;000freexxx.com;0190-dialer.com;
    08.185.87.0.liveadvert.com;08.185.87.00.liveadvert.com;
    08.185.87.01.liveadvert.com;08.185.87.02.liveadvert.com;
    08.185.87.03.liveadvert.com;08.185.87.04.liveadvert.com;
    08.185.87.05.liveadvert.com;08.185.87.06.liveadvert.com;
    08.185.87.07.liveadvert.com;08.185.87.08.liveadvert.com;
    08.185.87.09.liveadvert.com;08.185.87.1.liveadvert.com;
    08.185.87.10.liveadvert.com;08.185.87.100.liveadvert.com;
    08.185.87.101.liveadvert.com;08.185.87.103.liveadvert.com;
    08.185.87.104.liveadvert.com;08.185.87.105.liveadvert.com;
    08.185.87.106.liveadvert.com;08.185.87.107.liveadvert.com;
    08.185.87.108.liveadvert.com;08.185.87.109.liveadvert.com;
    08.185.87.11.liveadvert.com;08.185.87.110.liveadvert.com;
    08.185.87.111.liveadvert.com;08.185.87.113.liveadvert.com;
    08.185.87.114.liveadvert.com;08.185.87.115.liveadvert.com;
    08.185.87.116.liveadvert.com;08.185.87.117.liveadvert.com;
    08.185.87.118.liveadvert.com;08.185.87.119.liveadvert.com;
    08.185.87.13.liveadvert.com;08.185.87.130.liveadvert.com
     
  2. rbltech

    rbltech

    Joined:
    Feb 3, 2005
    Messages:
    33
    First off contact you ISP to make sure but at the company i work for we do not use a proxy exclusion list. so in theory you could just set it to not use one.
     
  3. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
  4. SlightlyLost

    SlightlyLost Thread Starter

    Joined:
    Feb 8, 2005
    Messages:
    2
    RE: AdAware version is the SE version, updated prior to scanning

    RE: Hijack This - Log posted below

    RE: Contacting the ISP on a support issue - They haven't figured out configuring Dnews yet, I'm not sure I want to overly tax them.... But hey, they're cheap and they don't require proprietary software shells like earthlink or netscape (blech! aol by any other name...) require to get the use of SlipStream.

    Also worth noting, HiJack This 1.99 is not reporting on the registry string where the proxy exception is actually set. I can disable hispeed.exe then refresh my view in regedit and the settings are, of course, gone. I can also edit them directly when hispeed is running, and remove the nasties. They DO return after restarting hispeed. The string is:

    HKEY_USERS\S-1-5-21-861567501-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride


    Last interesting item: I have installed HiSpeed.exe and surfed the net with it on four other known clean machines now. None of them are having this proxy exception issue. Frankly, it's not the end of the world, but it's a heckuva puzzle. I would really like to know what I picked up that's could do this, and how.


    ========paste============
    Logfile of HijackThis v1.99.0
    Scan saved at 9:35:23 PM, on 2/10/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINXP\System32\smss.exe
    C:\WINXP\system32\winlogon.exe
    C:\WINXP\system32\services.exe
    C:\WINXP\system32\lsass.exe
    C:\WINXP\system32\svchost.exe
    C:\WINXP\System32\svchost.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\WINXP\system32\spoolsv.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\WINXP\Explorer.EXE
    C:\Program Files\Eset\nod32kui.exe
    C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
    C:\Program Files\BasicISP\HiSpeed\hispeed.exe
    C:\hjt199\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5400
    O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Program Files\BasicISP\HiSpeed\PBHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
    O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKCU\..\Run: [ClipCache] C:\Program Files\ClipCache\clipc.exe /wait 3
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - Global Startup: BasicISP HiSpeed.lnk = C:\Program Files\BasicISP\HiSpeed\hispeed.exe
    O8 - Extra context menu item: Do&wnload by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_Link.htm
    O8 - Extra context menu item: Download A&ll by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_All.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Show All Original Images - res://C:\Program Files\BasicISP\HiSpeed\hispeed.exe/250
    O8 - Extra context menu item: Show Original Image - res://C:\Program Files\BasicISP\HiSpeed\hispeed.exe/227
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.MyBasicISP.net
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E52651F1-06BF-489E-8766-EFD747FAC8AA}: NameServer = 205.171.3.65 205.171.2.65
    O23 - Service: NOD32 Kernel Service - Unknown - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: Sygate Personal Firewall - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

    =========/paste==========
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Unwanted proxy exceptions
  1. ngiaimo
    Replies:
    2
    Views:
    171
  2. BIGALX58
    Replies:
    13
    Views:
    556
  3. nichos
    Replies:
    3
    Views:
    162
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/328356

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice