| | |
Spy Falcon removal
![]() |
Hmmm, well the HJT log is clean, and it seems that SFF took out all the infected folders. However, there still a possiblity of it.
1) Open Ewido, update full definitions, and run a full scan in safe mode, saving the log.
2) We're gonna run CCleaner:
Begin by downloading CCleaner, and specifically choosing the most recent version.
Then, follow these steps:
1. Close all programs so that you are at your desktop.
2. Double-click on the "My Computer" icon.
3. Select the "Tools" menu and click "Folder Options".
4. After the new window appears select the "View" tab.
5. Place a checkmark in the checkbox labeled "Display the contents of system folders".
6. Under the "Hidden files and folders" section select the radio button labeled "Show hidden files and folders".
7. Remove the checkmark from the checkbox labeled "Hide file extensions for known file types".
8. Remove the checkmark from the checkbox labeled "Hide protected operating system files". 9. Press the "Apply" button and then the "OK" button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.
Now, install the program. Open it, and choose the 'Options' tab. Inside, hit the 'Custom' tab, and add the following folders (Note: Not all of these files are on every computer. If one of these isn't present, skip it):
C:\Windows\Temp
C:\Temp
C:\Documents and Settings\<Every user listed>\Local Settings\Temp
C:\Documents and Settings\<Every user listed>\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\<Every user listed>\Local Settings\History
C:\Documents and Settings\<Every user listed>\Cookies
C:\Windows\Prefetch
After doing this, move back to the 'Cleaner' tab, and inside this, be sure your open to the 'Windows' tab. Inside, check the box labeled 'Custom Files and Folders'.
Next, after following all of these steps, you're ready to scan. Run scans in both the 'Cleaner' and 'Issues'. Note: It might take several scans in each to remove all of the junk.
Now, we're gonna use Adaware:
Please do the following: Download, install, update, configure, and run Ad-Aware SE Personal 1.06.
Lastly, restart the computer and post back here with the Ewido scan log, and a new HJT log.
Thanks.
1) Open Ewido, update full definitions, and run a full scan in safe mode, saving the log.
2) We're gonna run CCleaner:
Begin by downloading CCleaner, and specifically choosing the most recent version.
Then, follow these steps:
1. Close all programs so that you are at your desktop.
2. Double-click on the "My Computer" icon.
3. Select the "Tools" menu and click "Folder Options".
4. After the new window appears select the "View" tab.
5. Place a checkmark in the checkbox labeled "Display the contents of system folders".
6. Under the "Hidden files and folders" section select the radio button labeled "Show hidden files and folders".
7. Remove the checkmark from the checkbox labeled "Hide file extensions for known file types".
8. Remove the checkmark from the checkbox labeled "Hide protected operating system files". 9. Press the "Apply" button and then the "OK" button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.
Now, install the program. Open it, and choose the 'Options' tab. Inside, hit the 'Custom' tab, and add the following folders (Note: Not all of these files are on every computer. If one of these isn't present, skip it):
C:\Windows\Temp
C:\Temp
C:\Documents and Settings\<Every user listed>\Local Settings\Temp
C:\Documents and Settings\<Every user listed>\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\<Every user listed>\Local Settings\History
C:\Documents and Settings\<Every user listed>\Cookies
C:\Windows\Prefetch
After doing this, move back to the 'Cleaner' tab, and inside this, be sure your open to the 'Windows' tab. Inside, check the box labeled 'Custom Files and Folders'.
Next, after following all of these steps, you're ready to scan. Run scans in both the 'Cleaner' and 'Issues'. Note: It might take several scans in each to remove all of the junk.
Now, we're gonna use Adaware:
Please do the following: Download, install, update, configure, and run Ad-Aware SE Personal 1.06.
- Download Ad-Aware SE Personal 1.06:
- Download Ad-Aware SE Personal.
- Save aawsepersonal.exe to a convenient location (eg. the Desktop).
- Install Ad-Aware SE Personal
- Double-click on aawsepersonal.exe to install the program.
- Follow the default settings for installation.
- After the program has finished installing, uncheck the "Perform a full system scan now", "Update definition file now", and "Open the help file now" boxes.
- Update Ad-Aware SE Personal
- Double-click the Ad-Aware SE Personal icon on your Desktop.
- Click "Check for updates now" then click "Connect".
- It will check for any updates. If any are found click "OK" to download and install the updates. Once it has finished click "Finish".
- Configure Ad-Aware SE Personal
- Click on the Gear button at the top of the window.
- Click "General" on the left hand side to display the General Settings box.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Automatically save logfile"
- "Automatically quarantine objects prior to removal"
- "Safe Mode (always request confirmation)"
- "Prompt to update outdated definitions" - change to 7 days from the default 14.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- Click "Scanning" on the left hand side to display the Scan Settings box.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Scan within archives"
- "Select drives & folders to scan" - select your hard drive(s).
- "Scan active processes"
- "Scan registry"
- "Deep-scan registry"
- "Scan my IE favorites for banned URLs"
- "Scan my Hosts file"
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- Click "Advanced" on the left hand side to display the Advanced Settings box.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Move deleted files to Recycle Bin"
- "Include additional object information"
- "Include negligible objects information"
- "Include environment information"
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- Click "Defaults" on the left hand side to display the Default Settings box.
- Make sure the following items have your preferred settings in them.:
- "Default homepage"
- "Default searchpage"
- Make sure the following items have your preferred settings in them.:
- Click "Tweak" on the left hand side to display the Tweak Settings box.
- Click the + (plus) sign next to the Log Files section. This will expand the section.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Include basic Ad-Aware settings in log file"
- "Include additional Ad-Aware settings in log file"
- "Include reference summary in log file"
- "Include alternate data stream details in log file"
- Click the + (plus) sign next to the Scanning Engine section. This will expand the section.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Unload recognized processes & modules during scan"
- "Scan registry for all users instead of current user only"
- "Obtain command line of scanned processes"
- Click the + (plus) sign next to the Cleaning Engine section. This will expand the section.
- Make sure the following items have a green check/tick next to them. If they do not, click once on the circle next to them to put a green checkmark:
- "Always try to unload modules before deletion"
- "During removal, unload Explorer and IE if necessary"
- "Let Windows remove files in use at next reboot"
- "Delete quarantined objects after restoring"
- Once you are done with these settings, click "Proceed" to save them.
- This will take you back to the main screen.
- Run Ad-Aware SE Personal
- Click the "Start" button.
- Uncheck the "Search for negligible risk entries" entry.
- Choose the "Use custom scanning options" scan mode.
- Click the "Next" button.
- Ad-Aware will begin to scan for malware residing on your computer.
- Allow the scan to finish.
- Right-click on any entry in the list and click "Select All" to select the whole list.
- Click "Next" and choose "OK" at the prompt to quarantine and remove the objects.
Lastly, restart the computer and post back here with the Ewido scan log, and a new HJT log.
Thanks.
Now if ya like the help ya could always raise our reputation...
•
•
Join Date: Jan 2006
Posts: 28
Reputation:
Solved Threads: 1
Some good instructions here if all the previous ones have failed:
http://www.technibble.com/how-to-remove-spyfalcon/
Hope it helps.
http://www.technibble.com/how-to-remove-spyfalcon/
Hope it helps.
![]() |
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Help Please "NoSpywareSoft.net"
- Next Thread: Read only files
| Thread Tools | Search this Thread |
Tag cloud for Viruses, Spyware and other Nasties
adobe adware anti-malware anti-virussitesaccessissue antivirus attack audio avg backtoschoolspeech bar blackhat botnet botnets censorship china combofix commercial commercials conficker connect control crosssitescripting cyber cybercrime ddos domains e-mafia education email europe exam exploit facebook fake fancheckvirus gaming gumblar halloween herss.exe hijack hosting internet kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile nazi news obama onlinethreats panel parents patch phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus rootkit sans scareware school search security seopoisoning software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec threat trojan unwanted update usa virus viruses vista volume warning windows worm yahoo zero-day






