0

While trying to set proxy settings in my Windows machine registry I found an interesting thing that I hope you will be able to help me with.

The proxy settings that are set on my machine are:

ftp=127.0.0.1:80;http=127.0.0.1:80;https=127.0.0.1:80` -> ProxyServer

In Software\Microsoft\Windows\CurrentVersion\Internet Settings.

These proxy settings look like maybe some type of virus that sends all of you browsing data to somewhere.

But the ProxyEnable key is set to 0, so practically the proxy settings do not really work.

Every time I attempt to change the proxy settings, after few seconds they are restored to the default shown above.

I cannot find any software on my computer that will cause this kind of thing.

It is not my antivirus.

Improve this question
7
  • 1
    you do know what 127.0.0.1 is, don't you?
    – schroeder
    May 29, 2015 at 23:16
  • is it a company machine or your personal machine? Is Automatically Detect Settings set to off?
    – schroeder
    May 29, 2015 at 23:21
  • Google is full of reports of this problem - have you checked other people's reports?
    – schroeder
    May 29, 2015 at 23:21
  • @schroeder of course I know what 127.0.0.1 but you should never be naive.. You can never know from where or how the next virus is going to come from. This is my personal machine. I found out what it is. There is some extension on my Chrome (which I don't use anymore) that changes the proxy settings. This extension is OK and is used to set the proxy server on machine. Thanks anyway.
    – HackinGuy
    May 30, 2015 at 0:59
  • if you answered your own question, you should submit it and choose it as the accepted answer.
    – schroeder
    May 30, 2015 at 1:59

1 Answer 1

Reset to default
0

This is the hijack virus rootkit. You need to remove the root kit that keeps putting it back in with tdsskiller, then Malwarebytes and done

Improve this answer
1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .