Getting Rid of SpyFalcon
|
|
Phantom
Junior Member
|
11. February 2006 @ 14:47 |
Link to this message
|
Recently, a new addware problem has come on the market. I think it's a spin off of a few others. It's called spy Falcon. This is a nasty little booger.
Anyway, I just wanted to post the fix and for this.
If you go to the following website and walk through the manual instructions for getting rid of it in safe mode, you will be set. Take you less than ten minutes to do this.
Also, please be aware you need to right click and save fixspyfalcon as target. If you left click, you won't get anything.
Other than that, good luck.. This is the only thing I have found out there that works especially since of the the spyware prevention softwares haven't updated this yet.
http://www.spyware-removal-guideline.com/spyfalcon-removal
|
Advertisement
|
|
|
Senior Member
|
12. February 2006 @ 01:24 |
Link to this message
|
Nice..
|
Sniff3r
Newbie
|
13. February 2006 @ 07:13 |
Link to this message
|
Thank you! This seems to have done it. I would like to add a few things to you steps if I may.
I am running XP Pro and F8 would not get me into safemode it would only give me boot device options for some reason. I had to run msconfig from as explained here: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/20010524...
As well, you must be logged in as Administrator to delete the DLL and also for the bat file to remove some of the files it needs to.
When you?re all done, remember to uncheck SAFEBOOT (in msconfig so your system will reboot in "Normal" mode.
Thank you again Phantom!
|
Skalek
Newbie
|
15. February 2006 @ 02:32 |
Link to this message
|
I would not use the guide at www.spyware-removal-guideline.com. It misses an important step that for most users will not allow them to remoe spyfalcon. BC's guide is the way to go and is the one the above is based on:
http://www.bleepingcomputer.com/forums/topic43659.html
This message has been edited since posting. Last time this message was edited on 15. February 2006 @ 02:32
|
ugnius
Suspended permanently
|
16. February 2006 @ 00:46 |
Link to this message
|
This message has been edited since posting. Last time this message was edited on 16. February 2006 @ 08:51
|
Skalek
Newbie
|
16. February 2006 @ 02:59 |
Link to this message
|
Quote: here are manual removal instructions:
//www.2-spyware.com/remove-spyfalcon.html
All your site does it copy other peoples content and then you allude that the user must buy software in order to clean it. I see now you are pushing spyware doctor...last week it was spysweeper. Both of these products in which you are an affiliate and make a commission from each sale.
Everyone knows what you are doing and why...pretty scummy in my opinion when there is a free alternative that completely and safely removes the infection.
This message has been edited since posting. Last time this message was edited on 16. February 2006 @ 05:14
|
Senior Member
|
16. February 2006 @ 05:52 |
Link to this message
|
EDITED :P
This message has been edited since posting. Last time this message was edited on 28. February 2006 @ 08:06
|
Skalek
Newbie
|
16. February 2006 @ 05:58 |
Link to this message
|
Quote: Plus Skalek you gotta be jokin, i read the info on the link and its good info!!, nice one ugnius.
You obviously do not understand... and thats ok. These people have been known to try to get people to their site only to try to make affiliate sales. If you only knew how many boards they are banned from.
|
Senior Member
|
16. February 2006 @ 06:34 |
Link to this message
|
EDIT
This message has been edited since posting. Last time this message was edited on 16. August 2006 @ 09:51
|
Skalek
Newbie
|
16. February 2006 @ 07:30 |
Link to this message
|
|
Senior Member
|
16. February 2006 @ 08:14 |
Link to this message
|
can you hear the thunder ??
This message has been edited since posting. Last time this message was edited on 16. February 2006 @ 08:22
|
ddp
Moderator
|
16. February 2006 @ 08:46 |
Link to this message
|
everybody settle down!!
Skalek, there are pro's & con's for all methods & everybody has to find which method works for them whether free, pay or manually. the same goes for anti-virus as some prefer norton, some mcaffee & others for avg & whatever.
|
Senior Member
|
16. February 2006 @ 08:55 |
Link to this message
|
yeh :P
|
ddp
Moderator
|
16. February 2006 @ 09:06 |
Link to this message
|
Skalek, i read your links about ugnius & agree with you on that 1 but my previous statements still stands. we give the info so that a person decides which way to go, we don't decide for that person or we would be as guilty as ugnius which i have banned.
|
Skalek
Newbie
|
16. February 2006 @ 09:52 |
Link to this message
|
I fully understand and agree with you. I do, though, think the the other members deserve to hear about who they are going to for advice and what the potential risks are of doing so.
There is just way too much crapware out there, and too many people peddling bad advice in order to advance their own profits, that it can really piss me off.
Sorry if it came out any other way than my goal of trying to protect the users of this site.
|
Senior Member
|
16. February 2006 @ 10:04 |
Link to this message
|
Edit..
This message has been edited since posting. Last time this message was edited on 16. August 2006 @ 09:54
|
Skalek
Newbie
|
16. February 2006 @ 10:17 |
Link to this message
|
Quote: LMAO, there you go settled, now you got told i hope your nicer :P
No idea what your talking about or laughing about. I do not think I was told off...and from the fact that he was banned, shows that ddp agreed that ugnius's character was doubtful.
Quote: the other members should know who they are going for advice and the risks of doing so??, hes inactive now anyway ??..unless your talking about somthing else..
Once again not really sure what your talking about. I was obviously talking about ugnius.
I think our problem has been that we just dont understand each other :)
No matter...late!
|
Senior Member
|
16. February 2006 @ 10:20 |
Link to this message
|
you know what, i think you the first time today your tallking sense, good man Skalek :D
|
ddp
Moderator
|
16. February 2006 @ 13:52 |
Link to this message
|
everything is all settled than & we are a big happy family minus that 1 that got banned!
|
Senior Member
|
16. February 2006 @ 23:35 |
Link to this message
|
LOL yep, see i knew ddp would sort it :P
|
jmullner
Suspended due to non-functional email address
|
19. February 2006 @ 09:36 |
Link to this message
|
I used the "automatic removal link" and it worked fine. Thank you!
I may buy spysweeper if Trend-Micro doesnt start catching this kind of bs!
jimbo
|
Phantom
Junior Member
|
19. February 2006 @ 10:46 |
Link to this message
|
I haven't used spysweeper. It may way work. I friend recommended spydoctor and I bought that but it didn't work. So I used the manual instructions and had no problems that way. I think spyfalcon is relatively new with most cases I have seen this past four weeks online. I haven't heard anyone pick it up before then. I don't think the spyware catch programs have updated their software yet, but when they do, hopefully we all be set again.
|
rcflybry
Newbie
|
19. February 2006 @ 21:45 |
Link to this message
|
Thank you! Thank you! Thank You!
This Spyfalcon bug has been giving me headaches for a week now.
I'm very greatful for the info. on this forum. I had no clue on how to remove it. But after following the simple instructions posted I was able to get rid of it in about 10 min.
You guys are great!
Bryan
|
ddp
Moderator
|
20. February 2006 @ 17:24 |
Link to this message
|
teach & learn
|
Advertisement
|
|
|
FordJenn
Newbie
|
8. May 2006 @ 12:05 |
Link to this message
|
I work in a computer repair shop in Lincoln, Nebraska and we have seen a sudden up tick in the number of people infected with a new variant of the SpyFalcon spyware infection. While the basic infection is the same, there are a few new files to worry about.
We have a free removal tutorial posted at http://www.schrockinnovations.com/removespyfalcon.php, but suddenly people started reporting that upon restarting their computers they were becoming reinfected. We have since found that two additional files are being installed now that were not before. We updated the fixsf.zip removal tool in the tutorial to include these files.
Good luck and please post back here and let us know if you have any problems getting it removed.
http://www.schrockinnovations.com http://www.thorschrock.com
|