How Do I Remove PUM.Bad.Proxy Infection?

   Many people, recently, have been reporting that Malwarebytes (effective freeware anti-malware tool) has detected a computer infection / virus / malware that is being found in a registry key (Registry Values Infected):

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer ->

The anti-malware scan is detecting and reporting PUM.Bad.Proxy as the infection. And the problem most people are reporting is that even though when Malwarebytes removal tool is activated and reports that the PUM.Bad.Proxy infection was Quarantined and deleted successfully (removed) that it reappears after a computer 'restart'.

PUM.Bad.Proxy Easy Removal

I'll get right to the fix / removal and then explain what this infection / malware is all about and how you probably got it.

The fix / removal is to "uncheck" the Microsoft Office  .. [Common Startup] box in "msconfig/startup".

Removal Instructions

* Click start button (bottom left of normal Windows screen) to display the program list

* Click (choose) Run from the popped-up program menu

* In the "open" space (box) type:   msconfig  then click   "OK"

* On the pop-up window click the Startup tab (located  in  top area of the pop-up window)

* Look down the listed items for Microsoft Office    [the row 'Location' header  says Common Startup]

* The 'box' next to this listing will be 'checked', click on the   'checked box' to 'uncheck' the box.

* With the 'box' unchecked' click on the Apply button (located   along bottom of the pop-up window)

* Then click the Restart computer instruction.

Your computer should now be free of PUM.Bad.Proxy (removal is complete).

What Is The PUM.Bad.Proxy?

I don't think that it's harmful. This is not a virus or trojan, etc. As far as I can tell PUM.Bad.Proxy (PBP) is a registry value that is placed on your computer by MicroSoft when you download (or try to download) a MS Office 2007 or MS Word app and aren't running that edition of MS Office on your computer (that's how I got it). I found it on my computer (after running Malwarebytes) a day after downloading an 'invoice' template from the MicroSoft directed "added templates" source. I'm running Word 2003 and have deactivated Office 2007 (I go back to the mid to late 1990's with MicroSoft and have issues with their past business practices and so only use their products when I must). Since I'm not running MS Office2007 and downloaded the template which is probably an MS Office 2007 designed app MicroSoft placed the PBP into my registry for their purpose. The 'word' Bad in the name probably refers to 'not correct download / bad parameter match' or the such. When, the day after quarantining and deleting it, it was back I knew it was probably being prompted at start-up (I shut-down and power-off all my computer equipment each night and so reboot each day. Do to my protective nature, concerning my files, I run various manually activated anti-malware, ad-aware, spy ware and virus programs periodically during each week). I checked my start-up files and found that Microsoft Office (with checked box) had been added, not by me, to the list ... needless to say it's no longer there! Neither is PUM.Bat.Proxy!


 Source: Capt'n CyberZone, "How Do I Remove PUM.Bad.Proxy Infection?", www.captaincyberzone.com/bad_proxy

ALSO SEE
LizaMoon Attack - Action To Take
Is Wi-Fi Frying Our Brains?
"Rustock Botnet" Shut Down
Search Engine Optimization (SEO) Made Easy