How to remove SpyFalcon

Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!

> Geeks to Go! » Security » Malware Removal Guides and Tutorials

How to remove SpyFalcon

Options

admin

Mar 10 2006, 03:57 PM

Post #1

Site Administrator
Group Icon

Posts: 18,684
From: 127.0.0.1
OS: Windows 7 64-bit RTM

How-to remove SpyFalcon

SpyFalcon Screenshot:

Removal Instructions:

Step 1:

Download:
Use this URL to download the latest version (the file contains both English and French versions):
http://siri.geekstogo.com/SmitfraudFix.zip

Mirrors: Alternate official download locations for Smitfraudfix.zip
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
http://telechargement.zebulon.fr/259-smitfraudfix.html

Use:
- Extract all the archive content
- Search:
  - Double-click smitfraudfix.cmd
  - Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt
- Clean:
  - Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
  - Double-click smitfraudfix.cmd
  - Select 2 and hit Enter to delete infect files.
  - You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
  - The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
  - A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt
- Optional:
  - To restore Trusted and Restricted site zone, select 3 and hit Enter.
  - You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.
Note:
process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

Optional: Use this step only if your computer still seems infected:

Step 2:

Reboot your system back into Normal Mode and perform an online scan with Panda ActiveScan

Once you are on the Panda site click the Scan your PC button.
A new window will open...click the Check Now button.
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
If it wants to install an ActiveX component allow it
It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
When the download is complete, click on Local Disks to start the scan
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

To confirm that Spyfalcon is removed from your computer

Post the contents of the Panda ActiveScan report, along with a new HijackThis Log, the contents of smitfiles.txt in a new Topic in the Malware Removal Forum

=====================================================================
This is a self-help guide. Use at your own risk.

Important Note: If you need assistance with SpyFalcon, please start a new topic in our Malware Removal Forum.

admin View Member Profile	Jul 12 2007, 04:17 PM Post #2
Site Administrator Posts: 18,684 From: 127.0.0.1 OS: Windows 7 64-bit RTM	This topic has been left open to allow specific questions and comments related ONLY to this guide. It's NOT for posting HJT logs, links to your logs, or any other general malware help. Replies not following these rules will be deleted. Thanks for your cooperation.

« Next Oldest · Malware Removal Guides and Tutorials · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Similar Topics

Topic Title	Replies / Views	Topic Information
Malware Removal Guides and Tutorials How-to remove Winfixer, Virtumonde, Msevents, Trojan.vundo, ATLDistrib 123» 9	125 / 359,450	2nd November 2009 - 05:23 PM admin started - last by Rorschach112
Malware Removal Guides and Tutorials How To Remove clickfraudmanager, adwarefeed, zfsearch Firefox Redirect	13 / 7,671	23rd October 2009 - 02:13 AM jpshortstuff started - last by chamber
Malware Removal Guides and Tutorials How to remove Yoog Search/Blueskyadagency/Contextual ads/Snappyads	13 / 7,972	1st November 2009 - 08:19 PM Rorschach112 started - last by petra.blabla
Virus, Spyware and Trojan Removal how to remove advanced virus remover	0 / 40	30th October 2009 - 09:19 AM computer geek #1 started - last by computer geek #1

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Time is now: 7th November 2009 - 05:39 PM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.