Proxy keeps changing to 127.0.0.1:8118 automaticaly
up vote
1
down vote
favorite
It seems that my proxy is always changing automatically randomly. If I disable manual proxy configuration it turns on again.
I've tried to delete some registry keys but the same keys appear again.
The 3 keys I tried to delete are:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsMigrateProxy
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyEnable (which is always set to 0)
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyServer (which has the 127.0.0.1:8118 IP)
It's really annoying that this is happening and it didn't do this back when I had Windows 7 and Windows 8.1. Only started doing this a few weeks after the free upgrade to Windows 10.
windows-10 proxy
edited Apr 4 at 15:34
nixda
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
|
show 3 more comments
up vote
1
down vote
favorite
It seems that my proxy is always changing automatically randomly. If I disable manual proxy configuration it turns on again.
I've tried to delete some registry keys but the same keys appear again.
The 3 keys I tried to delete are:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsMigrateProxy
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyEnable (which is always set to 0)
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyServer (which has the 127.0.0.1:8118 IP)
It's really annoying that this is happening and it didn't do this back when I had Windows 7 and Windows 8.1. Only started doing this a few weeks after the free upgrade to Windows 10.
windows-10 proxy
edited Apr 4 at 15:34
nixda
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
1
Can you checknetstat -aor Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.
– CBHacking
Sep 15 '15 at 21:02
1
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43
|
show 3 more comments
up vote
1
down vote
favorite
up vote
1
down vote
favorite
It seems that my proxy is always changing automatically randomly. If I disable manual proxy configuration it turns on again.
I've tried to delete some registry keys but the same keys appear again.
The 3 keys I tried to delete are:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsMigrateProxy
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyEnable (which is always set to 0)
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyServer (which has the 127.0.0.1:8118 IP)
It's really annoying that this is happening and it didn't do this back when I had Windows 7 and Windows 8.1. Only started doing this a few weeks after the free upgrade to Windows 10.
windows-10 proxy
edited Apr 4 at 15:34
nixda
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
It seems that my proxy is always changing automatically randomly. If I disable manual proxy configuration it turns on again.
I've tried to delete some registry keys but the same keys appear again.
The 3 keys I tried to delete are:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsMigrateProxy
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyEnable (which is always set to 0)
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsProxyServer (which has the 127.0.0.1:8118 IP)
It's really annoying that this is happening and it didn't do this back when I had Windows 7 and Windows 8.1. Only started doing this a few weeks after the free upgrade to Windows 10.
windows-10 proxy
windows-10 proxy
edited Apr 4 at 15:34
nixda
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
edited Apr 4 at 15:34
nixda
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
edited Apr 4 at 15:34
nixda
20.6k777131
edited Apr 4 at 15:34
nixda
20.6k777131
edited Apr 4 at 15:34
nixda
20.6k777131
20.6k777131
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
asked Sep 15 '15 at 20:47
Tiago Vitorino
1113
1113
1
Can you checknetstat -aor Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.
– CBHacking
Sep 15 '15 at 21:02
1
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43
|
show 3 more comments
1
Can you checknetstat -aor Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.
– CBHacking
Sep 15 '15 at 21:02
1
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43
1
1
Can you check
netstat -a or Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.– CBHacking
Sep 15 '15 at 21:02
Can you check
netstat -a or Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.– CBHacking
Sep 15 '15 at 21:02
1
1
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43
|
show 3 more comments
2 Answers
2
active
oldest
votes
up vote
0
down vote
You can start by trying to change settings as an admin.
- Run Internet Explorer as Administrator.
- Click the settings icon on the top right corner.
- Click Internet Options
- From there, go to Connections Tab and then LAN Settings
- Uncheck Use a proxy server for your LAN
- Click OK and you're done!
After, boot into safemode, and disable proxy settings from regedit.
- Open regedit
- Navigate to
ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet
Settings in the left pane - Double click ProxyEnable and change its value to 0
answered Apr 4 at 10:08
Rust
1305
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
add a comment |
up vote
-1
down vote
Please post the key/value pairs in:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings
My hunch is that you have a proxy script enabled. I think the key is usually "AutoConfigURL" within the Internet Settings. For example, you can use this key to direct the proxy settings out to a .cgi file on the network to determine proxy settings - rather than using an explicit URL for the proxy. If this is the case, it may be malicious if there is no justification for the script settings.
answered Apr 4 at 16:46
Tucker
335
add a comment |
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
You can start by trying to change settings as an admin.
- Run Internet Explorer as Administrator.
- Click the settings icon on the top right corner.
- Click Internet Options
- From there, go to Connections Tab and then LAN Settings
- Uncheck Use a proxy server for your LAN
- Click OK and you're done!
After, boot into safemode, and disable proxy settings from regedit.
- Open regedit
- Navigate to
ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet
Settings in the left pane - Double click ProxyEnable and change its value to 0
answered Apr 4 at 10:08
Rust
1305
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
add a comment |
up vote
0
down vote
You can start by trying to change settings as an admin.
- Run Internet Explorer as Administrator.
- Click the settings icon on the top right corner.
- Click Internet Options
- From there, go to Connections Tab and then LAN Settings
- Uncheck Use a proxy server for your LAN
- Click OK and you're done!
After, boot into safemode, and disable proxy settings from regedit.
- Open regedit
- Navigate to
ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet
Settings in the left pane - Double click ProxyEnable and change its value to 0
answered Apr 4 at 10:08
Rust
1305
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
add a comment |
up vote
0
down vote
up vote
0
down vote
You can start by trying to change settings as an admin.
- Run Internet Explorer as Administrator.
- Click the settings icon on the top right corner.
- Click Internet Options
- From there, go to Connections Tab and then LAN Settings
- Uncheck Use a proxy server for your LAN
- Click OK and you're done!
After, boot into safemode, and disable proxy settings from regedit.
- Open regedit
- Navigate to
ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet
Settings in the left pane - Double click ProxyEnable and change its value to 0
answered Apr 4 at 10:08
Rust
1305
You can start by trying to change settings as an admin.
- Run Internet Explorer as Administrator.
- Click the settings icon on the top right corner.
- Click Internet Options
- From there, go to Connections Tab and then LAN Settings
- Uncheck Use a proxy server for your LAN
- Click OK and you're done!
After, boot into safemode, and disable proxy settings from regedit.
- Open regedit
- Navigate to
ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet
Settings in the left pane - Double click ProxyEnable and change its value to 0
answered Apr 4 at 10:08
Rust
1305
edited Apr 17 at 8:43
answered Apr 4 at 10:08
Rust
1305
answered Apr 4 at 10:08
Rust
1305
answered Apr 4 at 10:08
Rust
1305
1305
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
add a comment |
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
I sure had the same problem and fixed it this way :/
– Rust
Apr 6 at 18:33
add a comment |
up vote
-1
down vote
Please post the key/value pairs in:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings
My hunch is that you have a proxy script enabled. I think the key is usually "AutoConfigURL" within the Internet Settings. For example, you can use this key to direct the proxy settings out to a .cgi file on the network to determine proxy settings - rather than using an explicit URL for the proxy. If this is the case, it may be malicious if there is no justification for the script settings.
answered Apr 4 at 16:46
Tucker
335
add a comment |
up vote
-1
down vote
Please post the key/value pairs in:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings
My hunch is that you have a proxy script enabled. I think the key is usually "AutoConfigURL" within the Internet Settings. For example, you can use this key to direct the proxy settings out to a .cgi file on the network to determine proxy settings - rather than using an explicit URL for the proxy. If this is the case, it may be malicious if there is no justification for the script settings.
answered Apr 4 at 16:46
Tucker
335
add a comment |
up vote
-1
down vote
up vote
-1
down vote
Please post the key/value pairs in:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings
My hunch is that you have a proxy script enabled. I think the key is usually "AutoConfigURL" within the Internet Settings. For example, you can use this key to direct the proxy settings out to a .cgi file on the network to determine proxy settings - rather than using an explicit URL for the proxy. If this is the case, it may be malicious if there is no justification for the script settings.
answered Apr 4 at 16:46
Tucker
335
Please post the key/value pairs in:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings
My hunch is that you have a proxy script enabled. I think the key is usually "AutoConfigURL" within the Internet Settings. For example, you can use this key to direct the proxy settings out to a .cgi file on the network to determine proxy settings - rather than using an explicit URL for the proxy. If this is the case, it may be malicious if there is no justification for the script settings.
answered Apr 4 at 16:46
Tucker
335
answered Apr 4 at 16:46
Tucker
335
answered Apr 4 at 16:46
Tucker
335
answered Apr 4 at 16:46
Tucker
335
335
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f973533%2fproxy-keeps-changing-to-127-0-0-18118-automaticaly%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Can you check
netstat -aor Resource Monitor (resmon.exe) to see what is listening on port 8118? Of course, if it is malware, it might be stealthed against those tools.– CBHacking
Sep 15 '15 at 21:02
1
I would definitely run a malware scan as anytime I've found proxy being enabled automatically it's been due to malware.
– netniV
Sep 15 '15 at 21:45
@CBHacking I've disabled the manual proxy a few moments ago so it's not on at the moment. I tried to manually turn it on but it doesn't seem to do anything that way. netstat -a doesn't show up any 8118 ports, maybe because I was the one to turn on the proxy. If you have any suggestions on how to get it work to see what is listening on that port that would be amazing, otherwise i'll have to wait for it to automatically turn on again.
– Tiago Vitorino
Sep 15 '15 at 22:32
@netniV I've tried malwarebytes and adwcleaner, none of them said anything about proxy's whatsoever, should i try another program? If so, which one?
– Tiago Vitorino
Sep 15 '15 at 22:34
Hold on. To clarify, are you saying that the 8118 proxy is your own program, and is legitimate, and the problem is just that the OS keeps configuring itself to use it even though it shouldn't? You tagged this as "virus" so I figured you thought the proxy itself was malicious. Whether you tell the OS to use a given proxy or not has nothing to do with whether the proxy listener is running.
– CBHacking
Sep 15 '15 at 22:43