Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


I Just Thought I Had Removed Spy Falcon!

  • Please log in to reply
1 reply to this topic

#1 Davexx1


  • Members
  • 21 posts
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:15 PM

Posted 15 March 2006 - 09:00 AM

After struggling with the instructions and attempting to remove Spy Falcon and thinking I had done so late Monday evening, last night (Tuesday) when I got home I booted up PC and had an immediate system crash with BSOD. I repowered restarted and got a MS critical error message that an AOL driver problem had occurred, there was a link for download fix, I did, and all came back up OK but immdiately Spy Falcon regenerated itself onto my PC. :thumbsup:

I am guessing either I didn't have all SF files removed as I thought or the system crash initiated a system restore that included the SF spyware. Bottom line is I am back where I started.

Some general info is: PC is a Dell Dimension 8250 desk top with Win XP Home Edition, SP1, Winver 5.1, 256mb RAM, on a dial up with AOL. The PC was bought new directly from Dell about 2-3 years ago. I had been using AOL Safety & Security programs but removed all of that and now have loaded free versions of AVG Virus protection, Spybot, Zone Alarm firewall, Ad Aware, and Spy blaster. I also have CCleaner, SmitRem, Fix.??, HJT, etc. that was used before in the attempted removal process.

This evening when I get home from work I will start the process and follow removal instructions as best I can and hope for the best.

In another thread I started here yesterday "Found 007 Spyware", Enthusiast posted a lengthy list of suggestions and instructions for me to follow. If you read this post please respond and tell me whether I should follow your instructions first or follow the Spy Falcon removal steps first.

Thanks for your help.


BC AdBot (Login to Remove)


#2 Enthusiast


  • Members
  • 5,898 posts
  • Location:Florida, USA
  • Local time:08:15 PM

Posted 15 March 2006 - 09:14 AM

Follow the spy falcon removal steps listed on our forum first.

The 007 keylogger is a different problem.

Actually, since you have a recurring infection the best thing to do after you follow the spy falcon removal tutorial may well be to run Adaware and Spybot after updating them, and then post a HJT log in our HJT forum.

Read the pinned post in our “HijackThis” forum, here
Carefully read and follow all directions explicitly.

Following instructions run a log, and post it in following HJT forum,
at this link
Include a brief description of your computer (ie, processor, amount of RAM, brand or motherboard, etc, and the problem you are experiencing.)

Do not as yet attempt to fix anything by yourself using Hijack This as even what may seem to be a small mistake can render your op system inoperable.
Some files when in one folder may be fine while in another may be malware.

A member of our HJT Team will analyze your log, make recommendations and offer assistance.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you by assisting those posting in the order received as soon as possible.

Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make it different than displayed in the log you posted and therefore make your log inaccurate).

The first criteria they have when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having 1 reply.
A team member, looking to see if a reply has been made might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, make your post and wait for a response from a team member.

Edited by Enthusiast, 15 March 2006 - 09:26 AM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users