02-02-2012 02:59 PM
02-03-2012 07:52 AM
Thanks for the link, Quads --
What I was finding yesterday was pretty secondary. At a quick scan threatexpert gives a lot of details but not how to treat it? Maybe I missed something.
02-03-2012 01:14 PM
I found the setup file although it sounds like there may be variants bundled in other software, One which may use the HOSTS file to cause redirects.
The Funmoods logo looks the same as the Facemoods one.
When installed, it changes your search engine, homepage and adds an Extension for IE, Firefox, Chrome.
After uninstalling FunMoods in the Add /Remove programs and restarting your Browser(s) you still need to reset your Homepage to what you want, or had, and then also uninstall the Extension from within the browser options (tools).
02-03-2012 11:13 PM
Thanks very much for the additional info Quads !
In Google Chrome, the Search engine needed to be reset and FunMoods entry removed,
I don't allow this rubbish anywhere near my hard drives , but I can pass this info on to those who do ! Thanks again for taking the time Quads...Much appreciated
Windows7 SP1....Norton NIS 2012 ...4Gb RAM ..Momentus XT SolidState HybridHD
Docendo discimus ( Teach in order to learn)
02-05-2012 02:46 AM - edited 02-05-2012 02:48 AM
This is what I would do: Open up Windows's Add/Remove programs and try uninstaling the Funmoods toolbar (search for the entry related to Funmoods and click uninstall. Then try scanning your PC with the Malwarebytes (http://www.malwarebytes.org/mbam-download.php).
Click Update > Check for Updates.
When the definition files have updated, click OK.
Click the Scanner tab > Perform full scan > Scan.
If infections are found during the scan, the number of infections will be highlighted in red.
When the scan is finished, click Show Results.
Make sure that everything is selected, then click Remove Selected.
If you're prompted to restart to finish the removal process, click Yes.
Start Malwarebytes' Anti-Malware again.
Click the Logs tab.
Highlight the scan log entry, then click Open.
When the scan log appears in Notepad, copy and paste it into your next reply.
After the scan, reset your host file back to default (http://support.microsoft.com/kb/972034/en-us).
02-05-2012 10:57 AM
You might needhelp,
As Malwarebytes does not detect or fix the leftovers, as I discribed above. So I tend not to do things I know as usless after I actually installed Funmoods on this system.