Please help virus in my pc :\

rishab2000

Commendable
Jun 2, 2016
7
0
1,510
so, idiotically today I downloaded a file and tried installing it not knowing that it's a virus and ever since then my Internet on my computer has been down it took me a while to notice what was the cause but then I found out that the root was because the proxy kept shifting to 127.0.0.1:8080
I tried using adw cleaner and also tried changing registry entries but they didn't help it just kept shifting, can anyone help me fix this please?
I'm I'm deep trouble if I don't fix this...
 
Solution
try a full virus scan and malwarebytes scan, you might also want to check that the hosts file in c:\windows\system32\drivers\etc (if C is your main drive) to see if it has any strange entries in it, follow this microsoft guide to put it back to normal

codygriffy

Honorable
Jan 4, 2013
5
0
10,510


Easiest fix is just to reinstall windows. If this isn't an option. Immediately download these.

1. Free Anti-Virus : http://www.pandasecurity.com/usa/homeusers/solutions/free-antivirus/

2. Free Malware Remover: https://www.malwarebytes.com/

3. Install them from windows. I'm not sure if you can install them in safe mode which is the next step.

4. Restart in safe mode by tapping Delete key during windows splash menu / or right after the splash when you see the - - - flashing on the black screen.

5. Once you are in safe mode. Run through a full scan of both Panda and Malwarebytes and that should take care of the problem.
 

rishab2000

Commendable
Jun 2, 2016
7
0
1,510


there was a few problems with the host i think but i fixed that , fixed the registry entries cleaned it with adwcleaner now cleaning using mbab and hitman
 

rishab2000

Commendable
Jun 2, 2016
7
0
1,510

i have quickheal im cleaning with mbab and hitman and adwcleaner found a lot of problems almost 23 and i pressed clean and it did ,i think , then i resterted the problem still persisted and then i went to safe mode and altered the regedit entries and deleted proxyserver and turned proxy to 0 and no reinstalling is nnot an option :?
 

bobmanuk

Honorable
Jan 18, 2014
45
0
10,610
thats all well and good, but each different virus will do something different, do things in its own way, if you know exactly what the virus is called then there will be specific instructions for removing it.
 

rishab2000

Commendable
Jun 2, 2016
7
0
1,510

if i send you the file will you be able to find out ? btw i think i mightve fixed it i tried using hitman ,even though on reboot it said failed i cant see any attempts made to reset the proxy . but still im worried . alll i know is that its a proxy hijack there were a bunch of applications installed along with it plus a few browser hijacks
 

rishab2000

Commendable
Jun 2, 2016
7
0
1,510
http://www.malwareremovalguides.info/remove-pum-bad-proxy-removal-guide/ i followed this guide
but before that I used adw cleaner ,malware bytes and JRT :) thank you guys for alll the help :)
 

codygriffy

Honorable
Jan 4, 2013
5
0
10,510


Well hopefully it worked!
 

Chicano

Distinguished
Aug 29, 2011
193
2
18,910
Just in case you're still having the issue, this should definitely help.

Remove Http://127.0.0.1:8080/proxy.pac virus
http://www.2-remove-virus.com/remove-http127-0-0-18080proxy-pac-virus/


Proxy changer and DNS changer are similar and mostly the same tools are used to remove either. If proxy virus removal instructions don't help solve the issue, see if the DNS change removal guide works.


DNS Changer malware: how to check if you're infected, and how to fix it
http://www.wired.co.uk/article/dns-changer-check-and-fix

Removal tools:
- McAfee Stinger
- Windows Defender Online
- Microsoft Safety Scanner
- Norton Power Eraser
- Trend Micro HouseCall
- MacScan
- Avira DNS Repair Tool
- Kaspersky Anti-rootkit utility TDSSKiller


How can you detect if your computer has been violated and infected with DNS Changer?
http://www.dcwg.org/detect/