Post Malware Clean-up: Disable Proxy Settings

Often times a piece of Malware will change your Proxy Settings to intercept all communications from your Computer. If you have cleaned an infection, and are still experiencing trouble loading web pages your Proxy Settings may have been changed. To check these settings do the following (Pictures taken from Windows 7, other versions have similar steps):

  1. In the Control Panel click “Network and Internet.”Control Panel
  2. On the subsequent menu select “Internet Options.” This will open the  Internet Properties menu. (This is the same menu as the one accessed through Internet Explorer.  I feel safer with this method though, as not opening IE will prevent a browser misdirect. Also note, these settings can affect all browsers)
  3. Click on the Connections tab.Change Windows Proxy Settings
  4. Click the LAN settings Button. You can now see the Proxy Settings
  5. Most home users will simply want to un-check the box next to “Use a proxy server…” If you connecting through a legitimate proxy you will instead need to contact your network administrator for the actual address to enter here.
  6. Click okay
  7. Click okay

You may also want check out my article from a few days ago on how to reset TCP/IP settings. Enjoy!




Advertisements

Fix Winsock and TCP/IP in Windows 7

Yesterday after disinfecting a customer’s Windows 7 PC, it could not connect to a network. I found that I had to reset Winsock and TCP/IP. There are some great programs that will do this for you on XP, but what about Windows 7? The solution I used was pretty simple:

  • In the start menu click in the search box and type “cmd” (without the quotes of course). You will see an item named cmd.exe.
  • Right click it and choose “Run as Administrator.”
cmd.exe

Run as Administrator

  • If UAC pops up go ahead and allow this program.
  • A window will open that displays the command prompt. We will enter two commands.
CLI magic

The Command Prompt

  • First type “netsh winsock reset catalog” and hit enter.
  • Next type in “netsh int ip reset reset.log hit” and hit enter.

That’s all there is to it. Enjoy!