ECN Electrical Forum - Discussion Forums for Electricians, Inspectors and Related Professionals

ECN Shout Chat
Top Posters(30 Days)
Admin 19
Recent Posts
fuse rejectors
by NORCAL. 03/29/17 01:44 AM
Old decora style outlets
by NORCAL. 03/29/17 01:41 AM
NFPA stuff
by gfretwell. 03/28/17 08:08 PM
Anyone hiring inspectors?
by HotLine1. 03/27/17 08:03 AM
ESA Arc flash course
by TheShockDoctors. 03/24/17 10:15 AM
New in the Gallery:
SE cable question
Popular Topics(Views)
231,847 Are you busy
166,733 Re: Forum
160,855 Need opinion
Who's Online Now
0 registered members (), 63 guests, and 12 spiders.
Key: Admin, Global Mod, Mod
Previous Thread
Next Thread
Print Thread
Rate This Thread
#201931 - 07/04/11 06:15 PM Infected?  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Hello Everyone,
It's been awhile since my last visit. I hope someone can help me?

My wife's Dell laptop running win7, 62 bit looks infected with "Fun Web Search". I have removed it twice and found it in "programs" twice where I also removed it. Avast free version found another web site that is part of the "My Web Search" cluster of applications/programs today. I have tried several antivirus programs, spyware and cleaners to no avail. My next step is to get professional help.

The computer display looks different than it did. Firefox "add-ons" cannot be edited or removed. Background colors look real white. The PC is functional but on a network. Does anyone have an idea? Something more I can try myself before I take it to someone? Can a wireless router host a virus or other unwanted programs?

Thanks in Advance.........John


Tools for Electricians:

#201933 - 07/05/11 02:13 PM Re: Infected? [Re: JValdes]  
gfretwell  Offline


Member
Joined: Jul 2004
Posts: 9,060
Estero,Fl,usa
You probably still have some piece of malware on your machine. If you don't have a lot on it, the easiest fix is to back up the files you need, very selectively, format and reload the machine


Greg Fretwell

#201934 - 07/05/11 02:50 PM Re: Infected? [Re: JValdes]  
Vindiceptor  Offline
Member
Joined: Mar 2011
Posts: 98
San Diego

I would recommend Malwarebytes, downloadable for free at:

http://www.malwarebytes.org/

I have yet to find any malware that this package can't remove, it's not perfect, but it hasn't failed yet.

Spybot Search and Destroy is also very good:

http://www.safer-networking.org/en/index.html

For registry issues you can try CCleaner, but make sure you make backups before you delete anything you're unsure of:

http://www.piriform.com/ccleaner/download#




#201935 - 07/05/11 06:08 PM Re: Infected? [Re: JValdes]  
gfretwell  Offline


Member
Joined: Jul 2004
Posts: 9,060
Estero,Fl,usa
Have you tried doing a system restore from a time before you got the virus.


Greg Fretwell

#201936 - 07/05/11 09:26 PM Re: Infected? [Re: JValdes]  
JoeTestingEngr  Offline
Member
Joined: Nov 2005
Posts: 782
Chicago, Il.
Try this.
http://www.pchell.com/support/mywebsearch.shtml

If your attempt to remove states that it is being used, try finding the app or process in Task Manager and stopping it.
Joe


#201956 - 07/06/11 03:10 PM Re: Infected? [Re: JValdes]  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Thanks everyone. I tried everything suggested above and have also tried to format and reinstall the OS.
I cannot get the system to recognize the installation CD in black screen mode.
I have not tried Joes idea and will try it right now.

I am very familiar with formatting and reinstalling as I have performed the process several times on other machines. It is win7 thats giving me the trouble. It just is out of warranty also.


#201978 - 07/07/11 03:16 AM Re: Infected? [Re: JValdes]  
noderaser  Offline
Member
Joined: Mar 2007
Posts: 404
Portland, Oregon, United State...
Originally Posted by JValdes
I cannot get the system to recognize the installation CD in black screen mode.


If the computer is not set to check the CD drive for a startup device, you might have to push a key that is identified as "Boot Menu" or something similar when you first power on. IIRC, major manufacturers like Dell use F12. You should then get a list of available drives to boot from; they will usually display device names/model numbers and not volume names or drive letters.

Highly unlikely that System Restore will do anything, especially if you don't know what the source is. Affected system files would be the only thing restored, and if you don't know where the malware/viri came from you'll just get reinfected. The people who write these things are rather persistant; they make sure that once you're infected,


#201986 - 07/07/11 05:41 PM Re: Infected? [Re: JValdes]  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Thanks. I got it formatted and reinstalled. The instructions on MS and Dell support were both wrong. It was F12 like noderaser said. "boot with cd/dvd/rw".
And for anyone else it's "install win 7" and not "fix my computer". Then select "format" and follow the rest of the on screen instrctions.
Not one set of instructions were correct. Thanks to all.....John



Member Spotlight
TOOL_5150
TOOL_5150
Bay Area
Posts: 61
Joined: August 2007
Show All Member Profiles 
Featured:

2017 NEC and Related
2017 NEC
Now Available!

Shout Box
Powered by UBB.threads™ PHP Forum Software 7.6.0
Page Time: 0.018s Queries: 15 (0.003s) Memory: 0.7926 MB (Peak: 0.9570 MB) Zlib enabled. Server Time: 2017-03-30 10:45:20 UTC