The Electrical Contractor Network

ECN Electrical Forum
Discussion Forums for Electricians, Inspectors and Related Professionals

Books, Tools and Test Equipment for Electrical and Construction Trades

Register Now!

Register Now!

We want your input!

Featured:
   

2017 NEC and Related
2017 NEC
Now Available!

   
Recent Posts
Safety at heights?
by gfretwell
Today at 02:19 AM
Looking for older post
by Trumpy
Today at 01:04 AM
Last time to chat here
by Trumpy
Yesterday at 11:41 PM
Unsafe Situations
by Trumpy
Yesterday at 09:46 PM
Webmaster > Admin
by Trumpy
Yesterday at 08:29 PM
New in the Gallery:
Desk-mounted "power-board"
Shout Box

Top Posters (30 Days)
Admin 35
HotLine1 20
Trumpy 19
Ruben Rocha 17
gfretwell 16
Who's Online
1 registered (Admin), 166 Guests and 15 Spiders online.
Key: Admin, Global Mod, Mod
Topic Options
Rate This Topic
#201931 - 07/04/11 03:15 PM Infected?
JValdes Offline
Member

Registered: 06/03/07
Posts: 308
Loc: South Carolina
Hello Everyone,
It's been awhile since my last visit. I hope someone can help me?

My wife's Dell laptop running win7, 62 bit looks infected with "Fun Web Search". I have removed it twice and found it in "programs" twice where I also removed it. Avast free version found another web site that is part of the "My Web Search" cluster of applications/programs today. I have tried several antivirus programs, spyware and cleaners to no avail. My next step is to get professional help.

The computer display looks different than it did. Firefox "add-ons" cannot be edited or removed. Background colors look real white. The PC is functional but on a network. Does anyone have an idea? Something more I can try myself before I take it to someone? Can a wireless router host a virus or other unwanted programs?

Thanks in Advance.........John

Top
Test Equipment:

Large Selection of Test Equipment For Electrical, HVAC, Test & Measurement
Large Selection of Test Equipment For Electrical, HVAC, Test & Measurement

#201933 - 07/05/11 11:13 AM Re: Infected? [Re: JValdes]
gfretwell Offline


Member

Registered: 07/20/04
Posts: 9066
Loc: Estero,Fl,usa
You probably still have some piece of malware on your machine. If you don't have a lot on it, the easiest fix is to back up the files you need, very selectively, format and reload the machine
_________________________
Greg Fretwell

Top
#201934 - 07/05/11 11:50 AM Re: Infected? [Re: JValdes]
Vindiceptor Offline
Member

Registered: 03/28/11
Posts: 98
Loc: San Diego

I would recommend Malwarebytes, downloadable for free at:

http://www.malwarebytes.org/

I have yet to find any malware that this package can't remove, it's not perfect, but it hasn't failed yet.

Spybot Search and Destroy is also very good:

http://www.safer-networking.org/en/index.html

For registry issues you can try CCleaner, but make sure you make backups before you delete anything you're unsure of:

http://www.piriform.com/ccleaner/download#



Top
#201935 - 07/05/11 03:08 PM Re: Infected? [Re: JValdes]
gfretwell Offline


Member

Registered: 07/20/04
Posts: 9066
Loc: Estero,Fl,usa
Have you tried doing a system restore from a time before you got the virus.
_________________________
Greg Fretwell

Top
#201936 - 07/05/11 06:26 PM Re: Infected? [Re: JValdes]
JoeTestingEngr Offline
Member

Registered: 11/04/05
Posts: 786
Loc: Chicago, Il.
Try this.
http://www.pchell.com/support/mywebsearch.shtml

If your attempt to remove states that it is being used, try finding the app or process in Task Manager and stopping it.
Joe

Top
#201956 - 07/06/11 12:10 PM Re: Infected? [Re: JValdes]
JValdes Offline
Member

Registered: 06/03/07
Posts: 308
Loc: South Carolina
Thanks everyone. I tried everything suggested above and have also tried to format and reinstall the OS.
I cannot get the system to recognize the installation CD in black screen mode.
I have not tried Joes idea and will try it right now.

I am very familiar with formatting and reinstalling as I have performed the process several times on other machines. It is win7 thats giving me the trouble. It just is out of warranty also.

Top
#201978 - 07/07/11 12:16 AM Re: Infected? [Re: JValdes]
noderaser Offline
Member

Registered: 03/01/07
Posts: 405
Loc: Portland, Oregon, United State...
Originally Posted By JValdes
I cannot get the system to recognize the installation CD in black screen mode.


If the computer is not set to check the CD drive for a startup device, you might have to push a key that is identified as "Boot Menu" or something similar when you first power on. IIRC, major manufacturers like Dell use F12. You should then get a list of available drives to boot from; they will usually display device names/model numbers and not volume names or drive letters.

Highly unlikely that System Restore will do anything, especially if you don't know what the source is. Affected system files would be the only thing restored, and if you don't know where the malware/viri came from you'll just get reinfected. The people who write these things are rather persistant; they make sure that once you're infected,
_________________________
http://www.hsiprodsvcs.com/

Top
#201986 - 07/07/11 02:41 PM Re: Infected? [Re: JValdes]
JValdes Offline
Member

Registered: 06/03/07
Posts: 308
Loc: South Carolina
Thanks. I got it formatted and reinstalled. The instructions on MS and Dell support were both wrong. It was F12 like noderaser said. "boot with cd/dvd/rw".
And for anyone else it's "install win 7" and not "fix my computer". Then select "format" and follow the rest of the on screen instrctions.
Not one set of instructions were correct. Thanks to all.....John

Top


ECN Electrical Forums - sponsored by Electrical Contractor Network - Electrical and Code Related Discussion for Electrical Contractors, Electricians, Inspectors, Instructors, Engineers and other related Professionals