ECN Electrical Forum - Discussion Forums for Electricians, Inspectors and Related Professionals
ECN Shout Chat
Top Posters(30 Days)
Potseal 11
sparky 5
Recent Posts
Permit Snafus...AHJs and Contractors Jump in
by sparky. 04/29/17 05:59 PM
201 volt equipment?
by bigpapa. 04/29/17 12:15 AM
Schneider LC1D09
by jraef. 04/28/17 11:05 PM
Electrode boilers question
by annemarie1. 04/27/17 01:40 PM
Why cables look like they do
by LongRunner. 04/26/17 09:36 AM
New in the Gallery:
SE cable question
Popular Topics(Views)
234,977 Are you busy
169,808 Re: Forum
163,015 Need opinion
Who's Online Now
0 registered members (), 75 guests, and 10 spiders.
Key: Admin, Global Mod, Mod
Previous Thread
Next Thread
Print Thread
Rate This Thread
#201931 - 07/04/11 06:15 PM Infected?  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Hello Everyone,
It's been awhile since my last visit. I hope someone can help me?

My wife's Dell laptop running win7, 62 bit looks infected with "Fun Web Search". I have removed it twice and found it in "programs" twice where I also removed it. Avast free version found another web site that is part of the "My Web Search" cluster of applications/programs today. I have tried several antivirus programs, spyware and cleaners to no avail. My next step is to get professional help.

The computer display looks different than it did. Firefox "add-ons" cannot be edited or removed. Background colors look real white. The PC is functional but on a network. Does anyone have an idea? Something more I can try myself before I take it to someone? Can a wireless router host a virus or other unwanted programs?

Thanks in Advance.........John


Tools for Electricians:

#201933 - 07/05/11 02:13 PM Re: Infected? [Re: JValdes]  
gfretwell  Offline


Member
Joined: Jul 2004
Posts: 9,069
Estero,Fl,usa
You probably still have some piece of malware on your machine. If you don't have a lot on it, the easiest fix is to back up the files you need, very selectively, format and reload the machine


Greg Fretwell

#201934 - 07/05/11 02:50 PM Re: Infected? [Re: JValdes]  
Vindiceptor  Offline
Member
Joined: Mar 2011
Posts: 98
San Diego

I would recommend Malwarebytes, downloadable for free at:

http://www.malwarebytes.org/

I have yet to find any malware that this package can't remove, it's not perfect, but it hasn't failed yet.

Spybot Search and Destroy is also very good:

http://www.safer-networking.org/en/index.html

For registry issues you can try CCleaner, but make sure you make backups before you delete anything you're unsure of:

http://www.piriform.com/ccleaner/download#




#201935 - 07/05/11 06:08 PM Re: Infected? [Re: JValdes]  
gfretwell  Offline


Member
Joined: Jul 2004
Posts: 9,069
Estero,Fl,usa
Have you tried doing a system restore from a time before you got the virus.


Greg Fretwell

#201936 - 07/05/11 09:26 PM Re: Infected? [Re: JValdes]  
JoeTestingEngr  Offline
Member
Joined: Nov 2005
Posts: 782
Chicago, Il.
Try this.
http://www.pchell.com/support/mywebsearch.shtml

If your attempt to remove states that it is being used, try finding the app or process in Task Manager and stopping it.
Joe


#201956 - 07/06/11 03:10 PM Re: Infected? [Re: JValdes]  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Thanks everyone. I tried everything suggested above and have also tried to format and reinstall the OS.
I cannot get the system to recognize the installation CD in black screen mode.
I have not tried Joes idea and will try it right now.

I am very familiar with formatting and reinstalling as I have performed the process several times on other machines. It is win7 thats giving me the trouble. It just is out of warranty also.


#201978 - 07/07/11 03:16 AM Re: Infected? [Re: JValdes]  
noderaser  Offline
Member
Joined: Mar 2007
Posts: 404
Portland, Oregon, United State...
Originally Posted by JValdes
I cannot get the system to recognize the installation CD in black screen mode.


If the computer is not set to check the CD drive for a startup device, you might have to push a key that is identified as "Boot Menu" or something similar when you first power on. IIRC, major manufacturers like Dell use F12. You should then get a list of available drives to boot from; they will usually display device names/model numbers and not volume names or drive letters.

Highly unlikely that System Restore will do anything, especially if you don't know what the source is. Affected system files would be the only thing restored, and if you don't know where the malware/viri came from you'll just get reinfected. The people who write these things are rather persistant; they make sure that once you're infected,


#201986 - 07/07/11 05:41 PM Re: Infected? [Re: JValdes]  
JValdes  Offline
Member
Joined: Jun 2007
Posts: 301
South Carolina
Thanks. I got it formatted and reinstalled. The instructions on MS and Dell support were both wrong. It was F12 like noderaser said. "boot with cd/dvd/rw".
And for anyone else it's "install win 7" and not "fix my computer". Then select "format" and follow the rest of the on screen instrctions.
Not one set of instructions were correct. Thanks to all.....John



Member Spotlight
akmaster
akmaster
alaska
Posts: 70
Joined: June 2012
Show All Member Profiles 
Featured:

2017 NEC and Related
2017 NEC
Now Available!

Shout Box
Powered by UBB.threads™ PHP Forum Software 7.6.0
Page Time: 0.014s Queries: 15 (0.002s) Memory: 0.7945 MB (Peak: 0.9586 MB) Zlib enabled. Server Time: 2017-04-30 07:13:20 UTC