Connection invasion - weird proxy settings removed!

Discussion in 'Hardware' started by malawicrisp, Nov 24, 2011.

  1. malawicrisp

    malawicrisp Private E-2

    Hey...

    First a quick thanks to all involved in Majorgeeks for the endless supply of great software & priceless guides..

    I am stumped here though so I hope someone can help..

    I began having probs today with my internet connection...it faultered a little then disappeared...

    Checked network connection (windows XP), showed a new internet connection, that in it's properties gives very little detail. I normally connect thru the regular locan connection...ethernet to my wireless adapter, ethernet fromt he adapter to my router. IP is fine...I checked in firefox proxy settings to see what it's doing...it had switched to 'use system proxy settings', I don't and never have used a proxy...

    Switching the proxy setting off allowed firefox to connect, and Skype connects still, however the bot I use for my fav online game, won't connect, and if I try to install Spybot or use Trendmicro Housecall, they can't connect to their servers to run...

    This doesn't look like malware I've seen before, BUT! the big but, I also spotted two random processes trying to get thru my firewall...I don't have their names & can't load my firewall (zonealarm) cos I'm in safemode & it's disappeared lol...but when back in normal mode I'll check the history for the names of what I blocked...they are clearly related...

    I need help - I can't delete this extra connection that's appeared, if I disable it I lose all web access...I don't know enough here to disable this connection...I am running avira antivir scan right now, I can run spybot but it won't update...I can't run trend housecall cos it won't connect!

    Any help appreciated & I will spend some time trying to help others in return over the next few weeks, thanks for reading...:)
     
  2. malawicrisp

    malawicrisp Private E-2

    Ok the files that tried to get thru the firewall are

    zl1lidy80.exe

    and

    098.exe

    I can't update spybot to try & remove them, nor can I run trendmicro, please if anyone can recommend how to remove these that'd be great!
     
  3. tgell

    tgell Major Geek Extraordinaire

    Did you clear the proxy settings in IE. This is what Windows uses.

    Open Internet Explorer by clicking the Start button Picture of the Start button, and then clicking Internet Explorer.

    Click the Tools button, and then click Internet Options.

    Click the Connections tab, and then click LAN settings.

    Make a note of the proxy server settings. Clear them out and then uncheck the Use a proxy server for your LAN check box.
     
  4. tgell

    tgell Major Geek Extraordinaire

    I forgot to mention that you should probably go to the Malware Removal Forum and post your logs according to the sticky post.
     
  5. INSELMIMI

    INSELMIMI Guest

    Good ol boys moving

    Right now read the thread. Great job! GoodOlBoysMoving!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds