+ Post New Thread
Results 1 to 13 of 13
Windows 7 Thread, Default proxy replaced by 127.0.0.1 on Windows network in Technical; Hello everyone! Over the last two weeks we have more and more machines unable to connect to the internet in ...
  1. #1

    Join Date
    Apr 2012
    Location
    Birmingham
    Posts
    50
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Default proxy replaced by 127.0.0.1 on Windows network

    Hello everyone!

    Over the last two weeks we have more and more machines unable to connect to the internet in school via the proxy server. When checking the laptops\desktops in question, in Internet Options- Connections- LAN Settings the proxy server address box is grayed out however, the 'Use proxy server' box is checked and when clicking on advanced the HTTP and Secure server is set as 127.0.0.1 port 51139. Please see the attached doc for more info.

    Can any one help?

    Many Thanks

    RavIE ERROR.docx

  2. #2

    Join Date
    Oct 2012
    Location
    Wigan, Lancashire
    Posts
    116
    Thank Post
    8
    Thanked 28 Times in 16 Posts
    Rep Power
    9
    Every time I've had this happen it's been down to malware.

    Jack

  3. Thanks to JackCPickup from:

    Rav-Singh (6th June 2014)

  4. #3

    Join Date
    Apr 2012
    Location
    Birmingham
    Posts
    50
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for your reply JackcPickup, 3x machines had been down to Malware however, 8x machines had nothing in quarantine even after we ran the AV software.

  5. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,568
    Thank Post
    721
    Thanked 1,682 Times in 1,497 Posts
    Rep Power
    432
    You have impero or anything like that running?

    Ben

  6. Thanks to plexer from:

    Rav-Singh (6th June 2014)

  7. #5

    Join Date
    Apr 2012
    Location
    Birmingham
    Posts
    50
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hello Plexer, we have a Classroom Management Solution installed (for the last couple of years) called AB Tutor but only running on some machines.

  8. #6

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    If you're a Birmingham school, chances are you're running Sophos and it doesn't always pick up malware. Try downloading/running Malwarebytes and see if this picks up anything.

    Also - I presume you're deploying proxy settings either via GPO or GPP?

    Port 51139 isn't reserved for anything, plus pointing to 127.0.0.1 it's not going anywhere fast. The BGfL firewall will be blocking any attempts using port 51139, so at least it's restricted to just your network.

    If running Malwarebytes picks up nothing significant, I'd recommend you re-image the affected workstations.

  9. Thanks to Michael from:

    Rav-Singh (6th June 2014)

  10. #7

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,693
    Thank Post
    947
    Thanked 1,355 Times in 828 Posts
    Blog Entries
    1
    Rep Power
    451
    Quote Originally Posted by Rav-Singh View Post
    Hello Plexer, we have a Classroom Management Solution installed (for the last couple of years) called AB Tutor but only running on some machines.
    ABTutor does/did have a browser management module to block web surfing, that could be the cause if the policy is applied.

  11. Thanks to ZeroHour from:

    Rav-Singh (6th June 2014)

  12. #8
    Pottsey's Avatar
    Join Date
    Apr 2006
    Location
    Nottinghamsire
    Posts
    766
    Thank Post
    3
    Thanked 52 Times in 42 Posts
    Rep Power
    30
    Quote Originally Posted by Rav-Singh View Post
    Hello Plexer, we have a Classroom Management Solution installed (for the last couple of years) called AB Tutor but only running on some machines.
    We have the same problem with AB Tutor when ever we turn on web logging. Remove the part of the log policy that records websites visited. Even the newest version has this bug. Considering how major the bug is and how long its been going on they don't seem very interested in fixing it.

    EDIT: Its only a bug in Version 7. No problems here with Version 6.
    Last edited by Pottsey; 2nd May 2014 at 03:52 PM.

  13. Thanks to Pottsey from:

    Rav-Singh (6th June 2014)

  14. #9

    Join Date
    Oct 2012
    Location
    Wigan, Lancashire
    Posts
    116
    Thank Post
    8
    Thanked 28 Times in 16 Posts
    Rep Power
    9
    If you want to be sure re: malware...from 'Run' type iexplore "http://malwareexperts.com/rkill" let that download and run, it will detect and stop malicious services running.

    Then run a Malwarebytes scan with an up-to-date database.

    Jack
    Last edited by JackCPickup; 2nd May 2014 at 04:06 PM. Reason: I can't sentence

  15. Thanks to JackCPickup from:

    mac_shinobi (2nd May 2014)

  16. #10
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    818
    Thank Post
    84
    Thanked 136 Times in 116 Posts
    Blog Entries
    8
    Rep Power
    32
    Run this at a command line:

    Code:
    netstat -o -a
    Look for 127.0.0.1:51139, take note of the process ID number, and look it up in task manager. You should be able to identify what piece of software is doing this.

  17. Thanks to Duke5A from:

    Rav-Singh (6th June 2014)

  18. #11

    Join Date
    May 2012
    Posts
    166
    Thank Post
    21
    Thanked 26 Times in 17 Posts
    Rep Power
    9
    Quote Originally Posted by Pottsey View Post
    We have the same problem with AB Tutor when ever we turn on web logging. Remove the part of the log policy that records websites visited. Even the newest version has this bug. Considering how major the bug is and how long its been going on they don't seem very interested in fixing it.

    EDIT: Its only a bug in Version 7. No problems here with Version 6.

    yep same here with v 7 reported it while it was still in beta ... and still not working!!

  19. Thanks to victory2012 from:

    Rav-Singh (6th June 2014)

  20. #12

    Join Date
    Apr 2012
    Location
    Birmingham
    Posts
    50
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by victory2012 View Post
    yep same here with v 7 reported it while it was still in beta ... and still not working!!
    Hello everyone, big thank you to every one for replying, did speak to AB Tutor technical support and they said they are in the process of rectifying the well known proxy issue with version 7.3.0 (out tomorrow but on the web site already). I'm in the process of pushing it out at the moment will keep up updated on the progress, thanks again for your support chaps !

    Rav

  21. #13

    Join Date
    Apr 2012
    Location
    Birmingham
    Posts
    50
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Sorry about the late reply, AB Tutor released 7.3.0 which generally fixes the issue however, on some machines (5-10 out of 400) it didn't, so completely uninstalled AB Tutor and deleted user profile (may not need to do this but I found some student profiles were saving error default proxy) installed version 7.3.0 and that seems to fix the issue. Big thanks for everyone for advice and guidance !!!!

    Kind Regards

    Rav Singh
    Last edited by Rav-Singh; 6th June 2014 at 09:18 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. Multiple or alternate "Default Gateway" assigned by DHCP? Possible?
    By burgemaster in forum Windows Server 2000/2003
    Replies: 8
    Last Post: 8th May 2012, 09:49 AM
  2. Replies: 3
    Last Post: 26th August 2010, 06:09 PM
  3. Default Proxy settings
    By leco in forum Internet Related/Filtering/Firewall
    Replies: 2
    Last Post: 6th May 2010, 11:25 AM
  4. Replies: 1
    Last Post: 12th December 2008, 03:10 PM
  5. Multiple proxy settings (im on CC3 network)
    By gh256 in forum How do you do....it?
    Replies: 1
    Last Post: 7th December 2007, 09:15 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •