Essexboy please help Proxy Override problem [SOLVED]

General Topics
1

G’day Essexboy,

I thought I post it here as I don’t believe this is a virus related issue please see attachment AdwCleaner[R62].txt look in Registry section because I’ve never ever had a Proxy Override for years, and when I’ve run the latest AdwCleaner it won’t let me delete it all my settings via Thunderbird, IE and Firefox Internet connection set to no proxy and I’ve never had any issue which it seem strange.

I have no malware, Trojans or virus via Avast and MBAM nothing, and I run a boot time scan Avast show nothing it telling me I’m clean everything is fully up to date.

Ta.

2

Give Essexboy somthing more to read.
Attach also the farbar logs :wink:

3

Thanks Eddy :wink: give me an hour and I deliver the farbar logs for Essexboy for something to read, unless I’m fully instructed and strictly by Essexboy only.

Edit: See attachment of the farbar logs :wink:

4

That is a standard MS entry

By default, only host names are checked when the Bypass proxy server for local addresses option is turned on.
It is a new hijack area though hence the report on it

Otherwise I can see no problems

5

G’day Essexboy,

Thank goodness your here 8) how come when I run a AdwCleaner while back when they never pickup the Proxy Override I can’t remember what version that was, and now they show on the latest version.

What do you mean by It is a new hijack area though hence the report on it ??

So everything okay and I have nothing to worried and this is normal.

Edit: I can turn off the standard MS entry Proxy Override can I ??? ??? if so than how in W8

6

Malware writers like to find new areas to play in on a daily basis so we just play catch up

This is the windows 8.1 entry and there is no need to change it

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
“ProxyByPass”=dword:00000000
“AutoDetect”=dword:00000001
“UNCAsIntranet”=dword:00000000
“IntranetName”=dword:00000000

7

Thanks Essexboy for doing a checkup, because that is a standard MS entry

By default, only host names are checked when the Bypass proxy server for local addresses option is turned on.
and it’s FP that AdwCleaner should not pick this up as it’s FP bloody malware writers

8

AdwCleaner is only showing that area in case it is hijacked

Run Delfix to remove the tools

Download and run Delfix

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

9

Thanks essexboy for your help as long as I’m okay and safe that’s all it matter for my laptop, because I’m always very careful online and when I’m not 100% sure that is why I did right thing to come and ask you :wink:

10

Any time Speedy :slight_smile: