During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification?
The most common keys I have noticed are:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
and
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyBypass