Thursday, March 02, 2006

Spyware infested PC

Today I assisted with cleaning out the fake-antispyware called SpyFalcon. Don't ever install it!!!

Many anty-spyware utitilies were blocked, popups show up telling you of viruses installed. The application even wants you to pay for it before it even considers removing anything (which I doubt it does). Unistall just runs the application. If you delete it, it just comes back.

After a long battle and howto guides on the internet, that piece of utter and completely disgusting rubbish has finally been removed.

Here is the Howto (credit goes to whoever has written it!):


How to Remove SpyFalcon

It is recommended that you save these instructions to your desktop for later use.

To begin: right click over top of the link remove_spyfalcon.reg, select "Save Link As" or "Save File as", and save the file to your desktop.

Next, download SmitRemFix by Noahdfear to your desktop. Once downloaded, double click to uninstall all the files into a folder, but do not run the program yet. SmitRemFix must be run in Safe Mode.

In safe mode:

Click Start -> Control Panel; launch the Add / Remove Programs icon.

Find the entry for SpyFalcon and double-click on it. Follow the prompts to uninstall the program, but do not allow it to reboot the computer if it asks.

When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

Delete the following files and folders (if they exist):

C:\Windows\System32\dxmpp.dll

C:\Program Files\SpyFalcon
Close all open Windows; open the SmitRemFix folder on your desktop.

Double-click the RunThis.bat file to start the tool; follow the instructions. If SmitRemFix finds an infection, it will start an uninstaller. Click on the Uninstall button to finish the removal. When complete, SmitRemFix will close automatically.

Your desktop may disappear for a split second as the SmitRemFix removes any leftover files installed by the infection. When complete, it will close automatically and you will be back at your desktop.

At this point, your computer should now be free of the SpyFalcon infection. To verify that your computer is free of infection, you may choose (optionally) to run PandaOnline scan:

http://www.pandasoftware.com/products/activescan.htm

Once this is complete, reboot your computer back to normal mode.

No comments:

Post a Comment