Elektroda.com
Elektroda.com
X

No Internet: Proxy Refuses Connections on Windows 7, Firefox & Chrome Issues, OTL & FRST Logs

Pele 4887 2
This content has been translated flag-pl » flag-en View the original version here.
  • #1
    Pele
    Level 22  
    Hello

    Please help.
    Windows 7 strange things happen that means when I enter the firefox browser on any page it crashes the message proxy refuses connections in chrome crashes the lack of internet while the mail program Mozilla Thunderbird works pings to websites also go.
    When enabled, it still crashes.
    No Internet: Proxy Refuses Connections on Windows 7, Firefox & Chrome Issues, OTL & FRST Logs
    I scanned the esetem and the Caspian system and adwcleaner but found nothing serious.

    I don't know what the problem is.
    I attach logs from OTL and FRST
  • Helpful post
    #2
    Kolobos
    IT specialist
    That's how you run the fake infected invoices you get by email.

    Don't use combofix anymore, the otl is outdated so you could also donate.

    Perform Fixlist.txt for FRST:
    CloseProcesses:
    2018-06-28 16:37 - 2018-06-28 16:37 - 002704400 ___RH () C: \ ProgramData \ 5D6E46C6 \ 5D6E4664.dll
    ProxyEnable: [.DEFAULT] => Proxy [function enabled]
    ProxyServer: [.DEFAULT] => 127.0.0.1:1080
    ProxyEnable: [S-1-5-21-3157801966-2088565261-2422070968-1000] => Proxy [function enabled]
    ProxyServer: [S-1-5-21-3157801966-2088565261-2422070968-1000] => 127.0.0.1:1080
    ManualProxies: 1127.0.0.1:1080
    RemoveProxy:
    CHR HKU \ S-1-5-21-3157801966-2088565261-2422070968-1000 \ SOFTWARE \ Google \ Chrome \ Extensions \ ... \ Chrome \ Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps: //clients2.google.com/service / Update2 / crx
    CHR HKLM-x32 \ ... \ Chrome \ Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps: //chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
    CHR HKLM-x32 \ ... \ Chrome \ Extension: [nlnpeeaafijaebcdgkdeojkpnkfkjdnh] - hxxps: //clients2.google.com/service/update2/crx
    R2 5D6E46C6; C: \ ProgramData \ 5D6E46C6 \ 5D6E4664.dll [2704400 6/28/2018] () [No digital signature]
    2018-08-13 17:02 - 2018-08-13 17:02 - 000027047 _____ C: \ ComboFix.txt
    2018-08-13 16:47 - 2011-06-26 08:45 - 000256000 _____ C: \ Windows \ PEV.exe
    2018-08-13 16:47 - 2010-11-07 19:20 - 000208896 _____ C: \ Windows \ MBR.exe
    2018-08-13 16:47 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C: \ Windows \ NIRCMD.exe
    2018-08-13 16:47 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C: \ Windows \ SWREG.exe
    2018-08-13 16:47 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C: \ Windows \ SWSC.exe
    2018-08-13 16:47 - 2000-08-31 02:00 - 000098816 _____ C: \ Windows \ sed.exe
    2018-08-13 16:47 - 2000-08-31 02:00 - 000080412 _____ C: \ Windows \ grep.exe
    2018-08-13 16:47 - 2000-08-31 02:00 - 000068096 _____ C: \ Windows \ zip.exe
    2018-08-13 16:45 - 2018-08-13 17:02 - 000000000 ____D C: \ Qoobox
    2018-08-13 18:03 - 2018-06-28 16:37 - 000000000 ____D C: \ ProgramData \ 5D6E46C6

    Once done, delete the C: \ FRST directory and that's it.
  • #3
    Pele
    Level 22  
    Thank you very much helped.