Unable to remove manual proxy setup [Solved]

Hi,

I unable to access internet due to manual proxy setup.

I unable to remove the setting, it recreate again even though i removed.

I am using Windows 10 Home Single Language 64 bit edition.

i appreciate if someone can help to solve the issue. 

Thanks in advance.

irsathahamed,

Have a look at this video and give it a try: https://www.youtube.com/watch?v=H0idTEdlID8

Of course, you aren't trying to set up a proxy so you will make different choices.  You'll want to turn on Automatically detect settings on, and Use a proxy server off.

Let me know how it goes.

Obviously, you have access to another computer that you are able to communicate on the internet with.  You are going to need a thumb drive to move a program from the "good" computer to the one you are having issues with.

[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Scan

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
• Right-click FRST.exe or FRST64.exe and select Copy.
• Browse to your thumb drive, Right-click and select Paste.
• Put the thumb drive in the "problem" computer.
• Repeat the prior two steps to copy the program from the thumb drive and save it to the desktop on the "problem" computer.
• Right-click FRST.exe or FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the program.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the program run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste back on your thumb drive.
• Put the thumb drive back in your "good" computer and  Copy/Paste them back here in your next reply.

[external image: goGMWSt.gif]Backdoor Warning
 
——————————
 
One or more of the identified malware is known to use a backdoor, that allows attackers to remotely control your computer, download/execute files and steal system, financial & personal information.
 
If your computer has been used for online banking, has credit card information or other sensitive data, using a non-compromised computer/device you should immediately change all account information (including those used for Email, eBay, Paypal, online forums, etc).
 
Banking and credit card institutions should be notified of the possible security breach. Please read the following article for more information: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
 
Whilst the identified malware can be removed, there is no way to guarantee the trustworthiness of your computer unless you reformat your hard drive and reinstall your Operating System. This is due to the nature of the malware, which allows a remote attacker to make any kind of modification. Many experts in the security community believe that once compromised with this type of malware, the best course of action is to reformat/reinstall. Please read the following articles for more information.

• When should I re-format? How should I reinstall?
• Help: I Got Hacked. Now What Do I Do?
• Where to draw the line? When to recommend a format and reinstall?

You now have the choice between cleaning the malware present or reformatting your computer. Ultimately, the decision is yours, and what you're most comfortable with. Once you've read the articles linked above. If you want to reformat, let me know.  Otherwise, continue with the steps below.

[external image: goGMWSt.gif]P2P Warning

——————————

I see you have peer-to-peer (P2P) file sharing software installed on your computer (uTorrent). I advise you avoid P2P file sharing program; they are a security risk which can make your computer susceptible to malware. File sharing networks are thoroughly infested with malware - worms, backdoor Trojans, IRCBots, and rootkits propagate via P2P file sharing networks, gaming, and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install malware. The best way to reduce the risk of malware is to avoid these types of web sites and P2P program. Please read the following articles for more information.

• Risks of File-Sharing Technology
• P2P Software User Advisories
• More malware is traveling on P2P networks these days

Your P2P software can be removed by following the instructions below.

• Press the Windows Key [external image: pdKOQKY.png] + r on your keyboard at the same time. Type appwiz.cpl and click OK.
• Search for the aforementioned program(s), right-click and click Uninstall. Follow the prompts.

If you choose not to, please refrain from using the program(s) during this process.

Your data contains a number of pirated movies.  These could well be the source of your problem.  I would suggest that you immediately delete anything that was acquired through utorrent or any other questionable means.  Also, your system is rejecting microsoft office.  Is it genuine and legitimate?

[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Script

• Press the Windows Key [external image: pdKOQKY.png] + r on your keyboard at the same time. Type Notepad and click OK.
• Copy the entire contents of the codebox below and paste into the Notepad document.
  

  start
  CreateRestorePoint:
  CMD: ipconfig /flushdns
  EmptyTemp:
  
  (Microsoft Corporation) C:\ProgramData\Windows Security\winsecurity.exe
  ProxyEnable: [S-1-5-21-1503482889-339291205-912318997-1002] => Proxy is enabled.
  ProxyServer: [S-1-5-21-1503482889-339291205-912318997-1002] => http=127.0.0.1:8080;https=127.0.0.1:8080
  R2 WindowsSecurity; C:\ProgramData\Windows Security\winsecurity.exe [2324992 2016-05-30] (Microsoft Corporation) [File not signed]
  end

• Click File, Save As and type fixlist.txt as the File Name. 
• Important: The file must be saved in the same location as FRST64.exe. 

NOTICE: This script is intended for use on this particular machine. Do not use this script on any other machine; doing so may cause damage to your Operating System.

• Right-click FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Click Fix.
• A log (Fixlog.txt) will open on your desktop. Copy the contents of the log and paste in your next reply.
   

Yes.  Restore to factory settings will reformat the drive and install a fresh operating system.  I believe on your Windows 10 system it is actually called Reset to factory settings. (You don't want to revert to a restore point.  That won't reformat)

Here is a video that shows what to do:  https://www.youtube.com/watch?v=qzTNjs8k15Q

Dear Tomk,

Thank you very much for your assistance..

i will do the same. I will reset my pc to factory default.

Thank you once again.

Remember.  If you continue to "play" with p2p and pirated programs… you are likely to recreate the same situation.

I believe that there is nothing more to do with this thread, so I'm going to close it.

Good luck and be well.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.