Proxy change hack/virus?

mcfee03 · 6th August 2012, 8:13 AM

Hi,

I keep my PC relatively clean (anti-virus, malware scans regularly etc) but something that happens every so often (once every couple months).

I will turn on/reboot my PC, and Opera, Chrome and IE browsers will have had their proxy-settings changed.

Is this some kind of malware? Why does it keep happening? I cannot link anything I do to why it happens. Cheers

Great_Guru · 6th August 2012, 12:34 PM

What do you expect it do be?

What does it change to?

Does the change break connectivity?

tin · 6th August 2012, 1:00 PM

Not someone else using the computer, is it? Could be someone else changing it to access regionally blocked websites (Hulu for example).

mcfee03 · 6th August 2012, 7:42 PM

It changes to 127.1.0.0 (I think) and yes it breaks all brower's connectivity...

I am the only one using this laptop

JuicEmatic · 6th August 2012, 8:01 PM

start in safe mode and see if it still happens

Sphinx2000 · 6th August 2012, 8:03 PM

What anti-virus / internet security do yo use?

Some internet security programs proxy through themselves before going to the net to "protect" you from nasty 4chan pages and the like.. perhaps that software is broken / needs a reinstall..

JuicEmatic · 6th August 2012, 8:12 PM

could be relevant:

http://social.technet.microsoft.com/...3-9382e80804a4

6th August 2012, 8:13 AM	#1
mcfee03 Member Join Date: Jan 2007 Posts: 349	Proxy change hack/virus? Hi, I keep my PC relatively clean (anti-virus, malware scans regularly etc) but something that happens every so often (once every couple months). I will turn on/reboot my PC, and Opera, Chrome and IE browsers will have had their proxy-settings changed. Is this some kind of malware? Why does it keep happening? I cannot link anything I do to why it happens. Cheers __________________ Wanted to buy: SSD \| CPU Cooler Specs: i5 3570k w/stock HSF\| Asrock Z77 Pro3 \| Gigabite 7970OC 3GB \| 2x 4GB 1600Mhz Kingston Hyper \| 2TB WD Green \| Antec TP-650W\| Acer x233h 23" FHD \| AeroCool Strike-X case w/3 fans

6th August 2012, 12:34 PM	#2
Great_Guru Member Join Date: Sep 2001 Location: Australia Posts: 899	What do you expect it do be? What does it change to? Does the change break connectivity? __________________ Intel Core2Duo E6750 \| Gigabyte GA-EP35-DS3P \| 4096MB DDR2 Cosair PC6400 \| 300GB VelociRaptor + Storage drives \| 24" 2443BW LCD \| Gigabyte NV460GTX \| Pioneer DVR-215 SATA \| NextG \| ANTEC/CHIEFTEC CASE OWNERS/MODDERS MEMBER #160

6th August 2012, 1:00 PM	#3
tin Member Join Date: Jul 2001 Location: Narrabri NSW Posts: 5,653	Not someone else using the computer, is it? Could be someone else changing it to access regionally blocked websites (Hulu for example). __________________ ©®£¤¥±²³¶µ»«¼½¾¿§ The software required Win95 or better, so I installed Linux. Question marks are the new full stop?

6th August 2012, 7:42 PM	#4
mcfee03 Member Join Date: Jan 2007 Posts: 349	It changes to 127.1.0.0 (I think) and yes it breaks all brower's connectivity... I am the only one using this laptop __________________ Wanted to buy: SSD \| CPU Cooler Specs: i5 3570k w/stock HSF\| Asrock Z77 Pro3 \| Gigabite 7970OC 3GB \| 2x 4GB 1600Mhz Kingston Hyper \| 2TB WD Green \| Antec TP-650W\| Acer x233h 23" FHD \| AeroCool Strike-X case w/3 fans

6th August 2012, 8:01 PM	#5
JuicEmatic Member Join Date: May 2012 Posts: 26	start in safe mode and see if it still happens

6th August 2012, 8:03 PM	#6
Sphinx2000 Member Join Date: Sep 2001 Location: Brisbane Posts: 1,473	What anti-virus / internet security do yo use? Some internet security programs proxy through themselves before going to the net to "protect" you from nasty 4chan pages and the like.. perhaps that software is broken / needs a reinstall..

6th August 2012, 8:12 PM	#7
JuicEmatic Member Join Date: May 2012 Posts: 26	could be relevant: http://social.technet.microsoft.com/...3-9382e80804a4