By Blackpalm ยท 5 replies
Jul 22, 2004
  1. Hello, I am hoping someone may be able to help me out with this problem. I have submitted this problem to various other Spyware sites and they have been very helpful in assisting me to clean out the garbage-ware, however they are not able to help me with this pest. I know they are over burdened with helping others with the damned plague of scumware.

    I run on a regular basis the following programs,Spyware Blaster,Spybot S&D, Ad-aware 6.0 and CWShredder.
    They all run clean except for a few data miner cookies that are introduced by my ISP Earthlink.

    I am running an XP Pro Dimension 4600.
    This is the Problem: Connections Settings are resetting to Proxy after a logon to the ISP.
    In IE 6 after launching the logon to my ISP, I have to perform the following.
    Options-->Connections-->Settings-->and UNCHECK the box under 'Proxy Server.' So, after I do this, I'm able to surf the Internet with no problems. And I have to do this EVERYTIME I connect to the Internet because the settings will just reset.
    My ISP is earthlink and they are unable to help me with this problem.
    I would greatly appreciate any advice on this. Thanks.
  2. Rick

    Rick TechSpot Staff Posts: 4,572   +65

    Is it possible one of your anti-spyware programs are "protecting" your proxy information? Check for settings related such.

    I would also recommend using HijackThis in safe mode. You should be able to remove virtually anything that could be causing this problem in IE.

    If all else fails, there are alterntiave browsers, such as Mozilla, Firefox, Opera etc...
  3. will56

    will56 TS Rookie

    What Rick said. You could just uninstall the apps (one by one - the ones you mentioned) and see if anyone has an impact on your connection., and also like menionted above rty Firefox. It's actually faster for me with broadband. You might really like it.
  4. Blackpalm

    Blackpalm TS Rookie Topic Starter

    Hello again
    I took Ricks advice on disabling various anti-spyware I'm running but they do not seem to causing the persistant proxy setting problem. I went into safe mode and ran the latest verision of HJT and copied it for submission, I don't know how to analyze it, so if you would take a look-see I'd appriciate that. In the meantime I'll be looking to download and install an alternative browser that you suggested. Just a little history on this, I had upgraded from Earthlinks 5.0 to their later TotalAccess browser. The problem began shortly thereafter. I'll be switching ISP's soon so I'll just wait and see how that goes regarding IE6. Again, Thanks for your input.
    Logfile of HijackThis v1.97.7
    Scan saved at 3:40:48 PM, on 7/24/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\Documents and Settings\ADMIN\Local Settings\Temp\Temporary Directory 2 for\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_16_0.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O2 - BHO: EarthLink Popup Blocker - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
    O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_16_0.dll
    O3 - Toolbar: Pop-Up Blocker - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [ConMgr.exe] "C:\Program Files\EarthLink 5.0\ConMgr.exe"
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [WinPatrol] "C:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe"
    O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - Global Startup: APC UPS Status.lnk = ?
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 - Extra button: Research (HKLM)
    O9 - Extra button: (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
    O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
    O16 - DPF: ppctlcab -
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) -
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) -
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} -
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -,0,0,81/
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
    O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) -
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
    O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) -
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} -,0,0,19/
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
  5. Rick

    Rick TechSpot Staff Posts: 4,572   +65

    I don't see anything I recognize as alarming in the list.

    Is it possible this is some sort of Internet Explorer bug?

    What is the proxy it sets itself too? Perhaps this will offer a better clue as to the cause.
  6. Blackpalm

    Blackpalm TS Rookie Topic Starter

    Hi, Rick
    I am currently on the Net using Firefox, am very impressed with it. After a day or two I suspect I will feel so comfortable with it I probably won't be going back to IE6.
    I just checked Internet onnections from my Control Panel and the proxy settings are in a checked state. However in my Firefox environment they are set to 'Direct Connection to the Internet'. When I initially cranked up Firefox these were the default settings. After I took the option to import all settings from IE6 which included 'internet settings' I had to open 'Tools-Options-Connections' in Firefox to remove the proxy settings. Had no problems thereafter in Firefox with imported links, folders, etc.
    In Control Panel the connections read Proxy address to use: localhost Port 8081.
    This is displayed after entering Advanced.
    In the LAN Settings panel proxy is ticked in both areas. I am a stand-alone so I do not even use LAN.
    I pretty much scoured the net looking for any similar instances of this problem and I only found one, some poor gal who was really in a bind about it. Hope she had some luck.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...