Computer automatically connecting to proxy?

I'm currently using a friends old laptop, it's an Acer with Windows 8. Every once in awhile, I'd get a message saying "Error connecting to proxy server" while using Google Chrome. I quickly checked Chrome's settings and disabled the proxy server, which didn't really fix the issue. Eventually I found out that you can have proxy settings on both Chrome and in Window's network settings, so I disabled that as well, and didn't have any issues from there on in. I asked my buddy why he had a proxy server running on his laptop, he said he had no idea and I figured he probably just installed some shit or whatever. This was a month or two ago. Fast forward to today, I'm using the laptop and I get the same proxy server message. I check Chrome, and the proxy settings on that are still disabled. I went to the Windows proxy settings, and it was enabled again. I disabled it, came back an hour later and it was reenabled, so I'm starting to get real suspicious here.

The settings are as follows:

Address: http=127.0.0.1:49542;https=127.0.0.1:49542
Port:
Use the proxy server except for addresses that begin with the following entries: <-loopback>

I'm not the most computer knowledgeable guy ever, so if someone could perhaps fill in as to what that means, and how I can permanently disable it that'd be awesome. I figure it's either some sort of spyware or just some faggot program. I really have no idea how to find out which it would be, so help is very appreciated.

 

I'm not really an expert, but I'll give you a run-down of what I do when fixing my relatives' computers when they have a problem like this

First, you need to go into the programs and features (i'm not sure if it's the same thing in windows 8, just search programs and it should come up.) Anything installed here that mentions the word proxy or toolbar or has a suspicious publisher name should probably be removed in this case.
Always ask the computer's owner if they think the program should be removed before doing so (not sure if your friend is still an active user or if he just gave it to you/loaned it.) If you find any program that is proxy related and successfully uninstall it then you should try to disable the proxy again.
If this fails, continue on.

Next, you need to get the installers for the software that you're going to use to remove anything that's installed that might be causing your problem. I always use Malwarebytes and Spybot S&D (Search and Destroy). I recommend putting these somewhere you can access easily after rebooting for the next step. Don't install them just yet!

Now you need to get into safe mode so that you can safely remove whatever is causing this problem.
To do this you should follow step-1 of this guide. Make sure to follow the photos exactly and select minimal.

Find your installers for Malwarebytes and Spybot S&D now. Install them one at a time and reboot your computer into safe mode again after install. You should now search "firewall" and check to see if it is enabled. This is highly recommended and will help avoid these situations. Now run a scan from each program (one at a time again). Make sure to delete or permanently remove any malicious files or temporary files found. You should also disable the proxy setting that re-enabled at this time.
After your scans you can simply uncheck "Safe boot" in the same window that you used in the guide and reboot to see if it worked.


I'm going to assume here that there is a malicious program installed that is causing the problem. The steps which follow are ways which such programs may be removed. The program may or may not be removable just by going into the installed program list and uninstalling it, or by the further steps. Hopefully these steps are relevant to solving your issue. Please feel free to get a second or third opinion and to check out the official websites for the programs I included.

Spybot S&D
Malwarebytes

Again, I'm not an expert. I don't know how this works really, all I know is that safe mode restricts certain functions in windows. Usually this will stop a lot of malicious software from abusing your system and allow them to be properly removed. This is basically a carpet bomb approach.

You can PM me if you need any more help with this as this was somewhat of a vague explanation.

 

1. Checked my Event View (eventvwr) for any activity of the Proxy
Setting.
2. Found that "af_proxy_cmd.exe" was the process keep changing my Proxy !
3. af_proxy_cmd.exe is one of the process used by Anchor Hotspot Shield
VPN Tunnel Software.
4. After removing Hotspot Shield

So make sure that your VPN software does not touch the proxy setting

 

Awesome thanks. I'll report back in a few if this fixes the issues.

 

Turned out to be some adware called Rocket Tab that installed along with some other program. I removed it, everything is okay now. Thanks dudes.