Proxy Settings Per User - problems

4663 No1

Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 03/10/2024 18:11:15 Event ID: 4663 Task Category: Registry Level: Information Keywords: Audit Success User: N/A Computer: Main-Desktop-PC Description: An attempt was made to access an object. Subject: Security ID: SYSTEM Account Name: MAIN-DESKTOP-PC$ Account Domain: WORKGROUP Logon ID: 0x3E7 Object: Object Server: Security Object Type: Key Object Name: \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 Handle ID: 0x4f0 Resource Attributes: - Process Information: Process ID: 0x1024 Process Name: C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe Access Request Information: Accesses: Set key value Access Mask: 0x2 Event Xml: http://schemas.microsoft.com/win/2004/08/events/event"> 4663 1 0 12801 0 0x8020000000000000 9611601 Security Main-Desktop-PC S-1-5-18 MAIN-DESKTOP-PC$ WORKGROUP 0x3e7 Security Key \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 0x4f0 %%4433 0x2 0x1024 C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe -

4663 No 2 Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 03/10/2024 18:11:15 Event ID: 4663 Task Category: Registry Level: Information Keywords: Audit Success User: N/A Computer: Main-Desktop-PC Description: An attempt was made to access an object. Subject: Security ID: SYSTEM Account Name: MAIN-DESKTOP-PC$ Account Domain: WORKGROUP Logon ID: 0x3E7 Object: Object Server: Security Object Type: Key Object Name: \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates Handle ID: 0x4ec Resource Attributes: - Process Information: Process ID: 0x1024 Process Name: C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe Access Request Information: Accesses: Set key value Access Mask: 0x2 Event Xml: http://schemas.microsoft.com/win/2004/08/events/event"> 4663 1 0 12801 0 0x8020000000000000 9611600 Security Main-Desktop-PC S-1-5-18 MAIN-DESKTOP-PC$ WORKGROUP 0x3e7 Security Key \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates 0x4ec %%4433 0x2 0x1024 C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe -

4663 No3

Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 03/10/2024 18:11:15 Event ID: 4663 Task Category: Registry Level: Information Keywords: Audit Success User: N/A Computer: Main-Desktop-PC Description: An attempt was made to access an object. Subject: Security ID: SYSTEM Account Name: MAIN-DESKTOP-PC$ Account Domain: WORKGROUP Logon ID: 0x3E7 Object: Object Server: Security Object Type: Key Object Name: \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 Handle ID: 0x4dc Resource Attributes: - Process Information: Process ID: 0x1024 Process Name: C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe Access Request Information: Accesses: Set key value Access Mask: 0x2 Event Xml: http://schemas.microsoft.com/win/2004/08/events/event"> 4663 1 0 12801 0 0x8020000000000000 9611598 Security Main-Desktop-PC S-1-5-18 MAIN-DESKTOP-PC$ WORKGROUP 0x3e7 Security Key \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 0x4dc %%4433 0x2 0x1024 C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe -

4663 No4

Log Name: Security

Source: Microsoft-Windows-Security-Auditing Date: 03/10/2024 18:11:15 Event ID: 4663 Task Category: Registry Level: Information Keywords: Audit Success User: N/A Computer: Main-Desktop-PC Description: An attempt was made to access an object. Subject: Security ID: SYSTEM Account Name: MAIN-DESKTOP-PC$ Account Domain: WORKGROUP Logon ID: 0x3E7 Object: Object Server: Security Object Type: Key Object Name: \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 Handle ID: 0x4dc Resource Attributes: - Process Information: Process ID: 0x1024 Process Name: C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe Access Request Information: Accesses: Set key value Access Mask: 0x2 Event Xml: http://schemas.microsoft.com/win/2004/08/events/event"> 4663 1 0 12801 0 0x8020000000000000 9611598 Security Main-Desktop-PC S-1-5-18 MAIN-DESKTOP-PC$ WORKGROUP 0x3e7 Security Key \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\6D00116995929F623E2A64538BAE9DE0B466EBA1 0x4dc %%4433 0x2 0x1024 C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe -

4663 No 5

Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 03/10/2024 18:11:09 Event ID: 4663 Task Category: Registry Level: Information Keywords: Audit Success User: N/A Computer: Main-Desktop-PC Description: An attempt was made to access an object. Subject: Security ID: MAIN-DESKTOP-PC\patte Account Name: patte Account Domain: MAIN-DESKTOP-PC Logon ID: 0x1E418 Object: Object Server: Security Object Type: Key Object Name: \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Handle ID: 0x45c Resource Attributes: - Process Information: Process ID: 0x1834 Process Name: C:\Program Files (x86)\Common Files\KMSpico\Update\kmsupd.exe Access Request Information: Accesses: Set key value Access Mask: 0x2 Event Xml: http://schemas.microsoft.com/win/2004/08/events/event"> 4663 1 0 12801 0 0x8020000000000000 9611595 Security Main-Desktop-PC S-1-5-21-39967796-2804055322-1377459263-1003 patte MAIN-DESKTOP-PC 0x1e418 Security Key \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings 0x45c %%4433 0x2 0x1834 C:\Program Files (x86)\Common Files\KMSpico\Update\kmsupd.exe - Can only find these 5 under 4663

The following KMS software (which is illegal) seems to be causing the proxy setting to revert to 0.

C:\Program Files (x86)\Common Files\KMSpico\Update\kmsupd.exe

Additional note:

FYI, it's an illegal activation software. Usage of such software can get you banned from this forum. Just reading out the rules for you.

Suggest uninstalling that program and running a Malwarebytes scan.

Thanks for that Ramesh I will get rid of it & apologies if I’ve upset anyone. I am on vacation from tomorrow so I will let you know how I get on when I return. Again many thanks for your assistance in this matter.

You're welcome, John.