Proxy Server Problem!

[lakers]

OK, heres something else that may help. When I open IE, there are three quick things that appear in the bottom left corner. It doesn't make sense to me but it may make sense to you. I've hosted three paint files from where I took three screenshots on what happens when I open IE.







The order of the images shows the sequence of what happens. It only takes about two seconds until it comes up with the "page could not be found" error.

[TurcoLoco]

Ok, those screenshots didn't mean much to me, perhaps it didn't really captre the odd occurances so well?

Anyhow, I do believe this 'no connection' issue is not caused by a malware but more like a misbehaving or corrupt application such as a firewall or Internet Security Suite (ring any bells?). I have experienced this problem myself with both ZoneAlarm and one other program that I can't recall right now, both were Internet Security type programs. I have also seen few others (1 offline using Norton Internet Security utility) experienced similar problems and it turned out to be a program related setting or a file.

In one case the program that the problematic file belonged to was not even on the system!

So, I might be wrong and there might still be a malware related reminant on the system but none of the log files you posted captured anything and the issue is either what I described above or a collateral damaged caused by a previous infection that is no longer on your system. The improper disinfection procedures could have also damaged the related registry settings.

But first, let's try this: pull up the utility list from my signature and download and run Autoruns. Open the program and click on Options, then check the 'Hide Microsoft Entries' option then click 'Refresh' button to update the list by scanning again.
Once done, click File > Save As (at the Save in window, click Desktop so it saves the log file on your desktop which would make it easier to locate the log file) > Save.

Attach Autoruns.txt file to your next post please.

~TL

[lakers]

OK, I've attached the log file.

[lakers]

No, on the second attachment, I have the "automatically detect settings" checked.

[jholland1964]

No, on the second attachment, I have the "automatically detect settings" checked.

Take that off and see if it makes a difference. My provider told me to do that when having trouble years ago and have not had it since.
In fact this is in my instructions for set up;
In Internet Options, Local Area Network Settings, the option Automatically detect settings should be UNchecked, not checked.

[lakers]

I unchecked it but it still doesn't work. I'm starting to believe that this will never be solved.

[jholland1964]

Ok, from what I have been able to find AOL DOES use proxy servers in some instances.
Can you tell me where you are located? If you would prefer not posting this "to the world" please PM me here with the info...what AOL service are you using. Since you are connected via dsl, broadband or cable who is that basic service provided by...put all you can think of in this PM.
Also, did this problem begin two years ago after your previous malware problem OR did it begin with the installation of IE7? There HAVE been some proxy issues with IE7 & those who use AOL.

[lakers]

Thank You, I've sent the PM!

[jholland1964]

Received your PM and am continuing to search. Need you to do a favor;
Run the programs in the sticky again. Including the online antivirus scans.
Then run HJT again and post the new log.
Really scanning through the log today I note you have "parts" of two anti-virus programs running McAfee (which I assume comes via AOL Security) and also Norton. How many firewalls are you running?

[jholland1964]

Well it took me two days...but I FINALLY found some decent info on your easysearch.biz...

I would say, yes, your proxy problem is related to this prior infestation.
You do not say exactly HOW you removed it but it looks to me as if you removed the malware itself but DID not fix the registry values that this thing changes and it IS definitely a required part of the fix.

If you are comfortable with editing the registry...I always hesitate to post these...but I DO believe this is the problem.

First of all you will need to back up the registry
because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only.

Once you have backed up the registry then do the following;

1. Click Start > Run.
2. Type regedit

Then click OK.

3. Navigate to the keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run

4. In the right pane, delete the values:

"Microsoft Internet Acceleration Utility"="iau.exe"

"Internet Connection Wizard"="stisvsq.exe"

"Games Acceleration"="svshost.exe"

"Internet Mail and News"="msqdevl.exe"

"Microsoft Management Console"="lssas.exe"

"Multimedia extensions"="mservice.exe"

5. Navigate to the key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings

6. In the right pane, delete the following values:

"ProxyServer"="127.0.0.1:8080"
"ProxyOverride"="local"

7. Exit the registry editor.

5. To reset the Internet Explorer home page

1. Start Microsoft Internet Explorer.
2. Connect to the Internet, and then go to the page that you want to set as your home page.
3. Click Tools > Internet Options.
4. In the Home page section of the General tab, click Use Current > OK.