got a proxy link in browser, didn't ask for it, possible threat ?

Page 1 of 3 123 LastLast

  1. kem
    Posts : 62
    7 x64
       #1

    got a proxy link in browser, didn't ask for it, possible threat ?


    I recently noticed that when I surf to amazon my address url quickly flashes

    http://proxy.metalink.net/details.ht....amazon.com%2F

    then to the normal amazon.com address. I can surf elsewhere and it does not do that, only when I go to amazon. And only on win 7 x86 and x64.

    I removed all my bookmarks from Firefox as I thought it was hijacking that bookmark, I do not remember history in FF and I started opening to a blank page all to no avail.

    What is this ? Is it a threat ? and how do I get rid of it ?

    I use Comodo Firewall, Superantispyware and Malwarebytes
    did a scan and nothing.

    Emailed amazon and they say it's not theirs but that may be a canned response from someone low down in the chain that are clueless.

    What is this ? Is it a threat ? and how do I get rid of it ?

    It's really bugging me as amazon stores info on their server's.
      My Computer


  2. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #2

    Kem

    Download the two programs below

    AdwCleaner

    Click here AdwCleaner

    Click on Download Now button

    Save to the Desktop

    Right-click on AdwCleaner.exe and choose

    Click on Delete and confirm the prompt.



    Your computer will be rebooted automatically. A text file will open after the restart.

    Upload the log : The log file is at C:\AdwCleaner[Sn].txt


    Junkware Removal Toolkit

    Click here Junkware Removal Tool to download

    Drag the JRT.exe from the Downloads folder to your Desktop

    Right click JRT.exe and choose

    Once done upload the JRT.txt file
      My Computer


  3. Posts : 41
    Windows 7 Ultimate x64
       #3

    I also got a few flashes,so i don't think is a problem from the proxy server(because it's meant to protect you).When the next update comes I'll check it out if it happens more.
      My Computer


  4. kem
    Posts : 62
    7 x64
    Thread Starter
       #4

    I did JRTas you said and received this error mssg immediately upon clicking it: Error During Execution C:\Users\amit\AppData\Local\Temp\jrt\get.bat Access is denied

    oh no reboot

    just R1, R2, R3 files

    I gotta go to church, i'll be back. thank you.
    got a proxy link in browser, didn't ask for it, possible threat ? Attached Files
      My Computer


  5. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #5

    Run Farbar Recovery Scan Tool


    32-bit Version OS Farbar Recovery Scan Tool <==== Download Link

    Drag the FRST.exe from the Downloads folder to your Desktop

    Right click on FRST.exe and choose

    When the tool opens click Yes on the disclaimer window .
    Press Scan button.


    Please upload both logs in your reply.(FRST.txt and Addition.txt)

    FRST.txt and Addition.txt will be on the Desktop

    Upload a File
    Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .
      My Computer


  6. kem
    Posts : 62
    7 x64
    Thread Starter
       #6

    I gotta go to church, i'll be back in a bit and continue. Thank you.
      My Computer


  7. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #7

    It looks like something to do with coupons/cash back rebates... "RewardFinds". It does have something to do with Amazon, but you may have been caught up in a javascript.

    Lets clean out all Temporary files: download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
    Save any unsaved work. TFC will close ALL open programs including your browser!
    Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
    Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
    Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

    After you've done that, make sure proxy settings are disabled:
    1) Under “Tools” in the browser tool bar select “Internet Options”.
    2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
    3) Click “LAN Settings” near the bottom of the “Connections” section.
    4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
    5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
    6) Click “Ok” to close the “Internet Options” window.
    Reboot
    Make sure "Proxy server" is still disabled under your LAN Settings.
      My Computer


  8. kem
    Posts : 62
    7 x64
    Thread Starter
       #8

    I'm back.

    Did what you said Jacee and it requested the reboot, so i did then checked IE and proxy was not checked (BTW: i use firefox but still checked IE). Thanks Jacee.


    Thanks Jezuz, keep me posted.

    I looked at amazon url again and it still does that so I'll continue your process VistaKing.
      My Computer


  9. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #9

    Open

    • Go to Tools
    • Then Options
    • Select the Network tab
    • Click Settings
    • Choose the option: No Proxy
    • Click OK
      My Computer


  10. kem
    Posts : 62
    7 x64
    Thread Starter
       #10

    ran the FRST tool

    also did the FF procedure tools>options>advanced tab>network>settings and ticked 'no proxy' restarted FF but it still does that.

    The FRST logs r below.

    well the logs wont upload, they're blank anyway.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:38.
Find Us