Re: Remove SpyFalcon

David H. Lipman formulated on Wednesday :
From: "Postman delivers" <JR_the_Postman@xxxxxxxxxxx>



NO, I have also tried all of your suggestion, and the suggestions on
ad-aware and spybot searcgh and destroy forums...

It now places a false message infront of Microsoft anti-spyware
notices, and when I run ad-aware & spybot search and destroy in safe
mode the number of problems is growing, I now have 64, when it was
only 8 early in the infection.

This company or indicvidual needs to be hunted down, and skined
alive...

I have sent notes to ad-aware, and spybot search & destroy... next is
the newsgroup for bit defender/anti-spyware...

Must have gotten a new varient from this person...

JR the postman


Well I am sorry to hear that there may be a new variant.
Both tools were updated recently for such a case.

The actual false messages of infection are based upon the ZLob, SmitFraud and a couple of other Trojans. Once they are present, usually installed via via WMF Exploit, Sun Java Exploit or Downloader Trojan, the SpyAxe, SpyFalcon, SpySheriff, SpyFighter, SpyKiller, SpywareStrike, et al, may subsequently be installed.

Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.spywareinfo.com/index.php?showforum=18

After you make your post to one of the above, I would appreciate it if you could provide me, via email, the URL of your thread.

Dave, the machine is no-longer on line, but performing vinal signs for race weekend, 24 hours a day currently. I will not be able to get to it untill next tuesday to perform the hijack this procedure.

This particular infection evades all my cleaning attemps...

Also, this is the first infection of this kind I have seen there is no way the average computer users is going to go to the trouble I have to eliminate this malware...

I can only think it is a new varient, and hope someone locates this individual or company rapidly.

Thanks dave I will notify you, the moment I can get in front of the keyboard.

Could not post my info on spybot search & destroy contact page, it would not accept any of my e-mail addresses, so I have not found a method to contact them...

JR the postman


.

Relevant Pages

  • Re: Remove SpyFalcon
    ... | ad-aware and spybot searcgh and destroy forums... ... Create a HJT log file and post it in one of the below locations... ...
    (alt.comp.anti-virus)
  • Re: Best Offers..pop-up (llqszbvtdll.exe)
    ... This may be caused by spyware/malware that's gotten installed on ... Use Ad-Aware, MSAS and/or Spybot Search & Destroy to remove it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer - Will not open
    ... Spybot - Search & Destroy: ... Ad-aware 6- Lavasoft: http://www.lavasoft.de/software/adaware/ ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Spyware in Internet Explorer 6
    ... Keep in mind that not everything spybot and ad-aware finds is necessarily ... Spyware usually does not mean keystroke logger or virus and the two ... > and Destroy runs nightly on my computer as well as NAV and show no ...
    (microsoft.public.security.virus)
  • Re: explorer 6 browser
    ... >Download HiJack This!, Ad-aware, Pest Patrol and Spybot ... Search and Destroy. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
Loading