Securityrisk.proxyDNS, please help! [Solved]

About every 3-5 minutes my computers internet will go out for like 15 seconds, i bought a new ethernet cable thinking thats the issue, but it didnt fix it. I did some research and saw that malware can do this to a computer so i bought a Norton subscription and i do a new Full system scan everyday and i have the same thing pop up, "Securityrisk.proxyDNS, Risk High, resolved" but it always comes back and its very annoying cause i am a gamer and it is making my computer run really slow even though i have a decent computer and it makes my internet go out every 5 minutes so it is impossible to play multiplayer. Can someone please give me some tips on how to get rid of the "proxydns" it would be much appreciated. 

 

Please help!

Hi and welcome

You may need to temporarily disable your computer security to run these scans.
https://support.norton.com/sp/en/us/home/current/solutions/v116457581_ns_retail_en_us

Don't forget to turn it back on.

~~~~~~~~~~~~~~~~~~~~`
Please download the Malwarebytes Anti-Malware setup file to your Desktop.

OR from this location Here

• After the installation IS complete let it update if it asks.
• Under SETTINGS…..APPLICATIONS leave everything at default
• Under SETTINGS…..PROTECTION make sure AUTOMATIC QUARANTINE is on.
• Then go to the Dashboard and click on SCAN NOW
• When the scan is finished click on EXPORT SUMMARY……COPY TO CLIPBOARD
• Then come back to this thread and and under REPLY TO THIS TOPIC, right click in the reply and select Paste
• Then click on POST
• Exit Malwarebytes
• 
  ~~~~~~~~~~~~~~~
  
  [external image: h3qKPnn.png]Malwarebytes AdwCleaner
• Please download Malwarebytes AdwCleaner and save the file to your Desktop
• Right-click AdwCleaner.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Follow the prompts.
• Click [external image: A49sxPr.png] Scan.
  
  Wait for the scan to complete,
  Click on [Clean], read the informative message. If you have any questions about it, please ask.
  All unrequired programs will be closed during the cleaning process, so be sure to save your work before.
  When the clean is over, the computer may reboot and shows the logfile
  Copy/Paste it in your answer.
  
  ~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  [external image: xlK5Hdb.png]Farbar Recovery Scan Tool (FRST) Scan
• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
• Right-Click FRST.exe / FRST64.exe and select [external image: AVOiBNU.jpg]Run as administrator to run the programme.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the programme run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.
  
  Please post
  Malwarebytes Anti-Malware log
  AdwCleaner log
  FRST.txt & Addition.txt

When you ran Malwarebytes Anti-Malware, everything was quarantined?

~~

Start Farbar Recovery Scan Tool (Please double-click on FRST/FRST64) with Administrator privileges

or Right click on the FRST icon and select Run as administrator
Highlight the below information then hit the Ctrl + C keys at the same time
or
Right click/highlight on the text below and select Copy.
[beginning with Start:: and finishing with End::]


Start::
CloseProcesses:
CreateRestorePoint:
2017-07-16 00:00 - 2017-06-27 13:27 - 000758288 _____ (NVIDIA Corporation) C:\Users\Jake Donathan\AppData\Local\Temp\nvSCPAPI.dll
2017-07-16 00:00 - 2017-06-27 13:27 - 000873320 _____ (NVIDIA Corporation) C:\Users\Jake Donathan\AppData\Local\Temp\nvSCPAPI64.dll
2017-07-16 00:00 - 2017-06-27 13:27 - 000390256 _____ (NVIDIA Corporation) C:\Users\Jake Donathan\AppData\Local\Temp\nvStereoApiI.dll
2017-08-14 21:09 - 2017-06-27 13:27 - 000368576 _____ (NVIDIA Corporation) C:\Users\Jake Donathan\AppData\Local\Temp\nvStInst.exe
C:\ProgramData\SMRResults501.dat
Consumer Input Update Helper (HKLM-x32\…\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.309 - Compete Inc.) Hidden <==== ATTENTION
groover (HKLM-x32\…\{1735357F-0D26-4566-b78C-C847801AB3F0}) (Version: 2.0.0.478 - groover) <==== ATTENTION
Online.io Application (HKLM-x32\…\{F0847AE0-465A-4D7B-A555-AABB43B550F0}) (Version: 2.1.0 - Microleaves) Hidden <==== ATTENTION
Traffic Exchange (HKLM-x32\…\{92C1F287-B8A1-415C-B872-4000F57C055A}) (Version: 2.0.0 - Microleaves) Hidden <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-2286819157-927440417-1193956067-1003_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-23D59125D0F0}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
Task: {2B81B2B3-44CE-4CC6-B46F-583A9EA9DD22} - \[removed] -> No File <==== ATTENTION
Task: {30B7DA20-2832-45DB-986A-A2221A0AC71E} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {4BC73749-829B-4154-985E-6D029DF38FCD} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {4ED7A767-0B0C-4B10-82A2-883DDBC24A62} - \Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval -> No File <==== ATTENTION
Task: {51B7FB15-4DCB-400E-9A98-10E802F21FB3} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceScreenOnOff -> No File <==== ATTENTION
Task: {60EB5071-9285-4AD4-AA8B-C44DB1746262} - \TweakBit\Driver Updater\Time for deal -> No File <==== ATTENTION
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> No File <==== ATTENTION
Task: {79F60F75-B1BC-4C83-96E9-12E3C0A1ACB0} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {7E476FF1-E465-4956-A850-C83E8F802360} - \TweakBit\Driver Updater\Start Driver Updater automatic scanning -> No File <==== ATTENTION
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> No File <==== ATTENTION
Task: {91643AFB-B059-4502-B486-9CF7319A4707} - \Microsoft\Windows\RemovalTools\MRT_HB -> No File <==== ATTENTION
Task: {B1C5562D-FEBF-4356-9B28-C36B8A35BAF9} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {B2C4945C-48AB-48BE-9384-71665E86E22F} - \SMW_UpdateTask_Time_313638313834393033312d504a2d414534372a5a6c785a -> No File <==== ATTENTION
Task: {B320E058-C6FA-413F-876B-0C9B4428AE66} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic6 -> No File <==== ATTENTION
Task: {C68DFC28-38BE-4BA1-911A-857B670F7056} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> No File <==== ATTENTION
Task: {C6B2579B-4962-4D12-883D-BBD420573A6C} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1 -> No File <==== ATTENTION
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {D19A2726-897E-4F7D-9CE4-0773B449CE9E} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceConnectedToNetwork -> No File <==== ATTENTION
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> No File <==== ATTENTION
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> No File <==== ATTENTION
Task: {F38FD78D-4C8B-42E3-BA47-2A6C1A145A87} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {FDCC597F-2C26-4683-93E7-97E0B20FCE34} - \Adobe Flash Player Updater -> No File <==== ATTENTION
Task: {FE2B26BB-DE4F-4E34-9F11-E3A78BDBA33D} - \TweakBit\Driver Updater\Start Driver Updater оn logon -> No File <==== ATTENTION
ShortcutWithArgument: C:\Users\Jake Donathan\Desktop\chrome - Shortcut.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> –profile-directory="Profile 1"
Hosts:
Emptytemp:
End::


Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~
Right after running this fix please go to your add/remove programs lists and see if you can find
Consumer Input Update Helper
groover
Online.io Application
Traffic Exchange
IF found please try to uninstall. If they are not located there please go to the next step.

~~~~~~`

Zemana AntiMalware Free

download it from here:

Double-click on the file named Zemana.AntiMalware.Portable to perform a system scan with Zemana AntiMalware Free.

You may be presented with a User Account Control dialog asking you if you want to run this program. If this happens, you should click Yes to allow Zemana AntiMalware to run.
When Zemana AntiMalware starts, click on the Scan button to perform a system scan.
without changing any options, press Scan

When Zemana has finished finished scanning it will show a screen that displays any malware that has been detected. To remove all the malicious files, click on the Next button.
Zemana AntiMalware will now start to remove all the malicious programs from your computer.
Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

• open Zemana AntiMalware again and locate the latest report
• please paste the contents into your reply
• 
  When the process is complete, you can close Zemana AntiMalware

Please post
Fixlog.txt
Zemana AntiMalware

Also, please tell me how the computer is doing now.

I think it wise to run Malwarebytes Anti-Malware one more time

Open MalwareBytes

• On the Dashboard click on Update Now
• Under SETTINGS…..APPLICATIONS leave everything at default
• Under SETTINGS…..PROTECTION make sure AUTOMATIC QUARANTINE is on
• Then go to the Dashboard and click on SCAN NOW
• Make sure to select THREAT SCAN
• When the scan is finished if it ask to reboot the machine please allow it
  (if malware is found)
  Then Open MalwareBytes again
  
  to the side look for Reports
  You should see one listed for the last scan run
  Click on that then the view button
  Then click on Export, and copy and paste that log in your next reply.
  
  ~~~~~~~~~~~~~~~~~~~~~
  
  Emsisoft Emergency Kit
• Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).
• After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
• The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
• When update is complete, click Malware Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes. Emsisoft Emergency Kit will start scanning.
• When the scan is completed click Quarantine selected objects. Note, this option is only available if malicious objects were detected during the scan.
• When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
• Please save the log in Notepad on your desktop and post the contents in your next reply.
• When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.
• 
  

Please post these logs when finished

How is your computer now.

Got my fingers crossed we wont see that again.

Seeing that Google Chrome had been hit with the infection more then anything, I think you should reset that browser.

Instructions on how to backup your Favorites/Bookmarks and other data can be found below.
Backup Chrome Bookmarks

Proceed with the reset once done.
[external image: U5NwUGc.png]Chrome: Chrome - Reset browser settings

How we doing here?

One more bump.

Glad we could help. [external image: SakDYGv.gif]
Since this issue appears resolved … this Topic is closed.