Can't delete spyware, Spyfalcon

[bald_head_slick]

I've recently aquired a virus/spyware on my PC. I've used Spybot, Ad Aware, Microsoft anti spyware, XoftSpy, Norton Antivirus, etc but it's still there. I noticed an earlier thread with someone that had the same problem so I followed all directions he was given which cured his problem but mine's still there. I've got an icon in my tasjbar that keeps flashing and pops up fake warnings which once clicked, encourage me to by their software. If I just click on the icon I get directed to a site encouraging me to by Spyfalcon software. I also get porn pop ups now. Whatever I do I just can't get rid of it. Can anyone help? I'm at my wit's end. I've spent nearly 2 days trying to fix it using online advice but with no luck

 

[extrongt]

SpyFalcon Removal

You may try the Spyfalcon removal tools, I have found on a security site.


Edit: I have removed your link because it recommends to download an antivirus programme etc. There are much easier and quicker ways to get rid of Spyfalcon. Thanks for trying though. Regards Howard.

 

[father chaos]

there is a new antispyware on the microsoft site, think it is windows defender, i used it last week for a simiar think and got rid of it.

 

[howard_hopkinso]

Hello and welcome to Techspot.

Go HERE and follow the instructions.

Then, go HERE and follow the instructions in the order they are given.

Post a fresh HJT log as an attachment, only after doing the above.

Regards Howard :wave: :wave:

 

[bald_head_slick]

Still got problems!!!! Spyfalcon

Thanks for all the info. I've followed your instructions howard and it appears that after accidentally rebooting in debugging mode (What is that?), the fake warnings have finished. I still carried on with your instructions though just to be sure. The flashing symbol on the task bar has disappeared and there have been no more warnings. However, it appears that I now have another problem. When I reboot my PC it takes approx 5 minutes to kick in. After the black screen with the windows logo it takes about a minute or so to get to the blue screen with the accounts info. After clicking on my account I get the full desktop with all icons but cannot use them. I try to open IE and there the green progress bar at the bottom takes ages to complete. After approx 2 minutes the page finally kicks in and the PC plays the sounds that usually happen when you turn your PC on. Hope you understand what I'm talking about. It appears that I have a severe delay in being able to do anything although everything appears to work fine. I have posted my last 2 HJT logs and my smitfiles.txt in case needed and will greatly appreciate any help!

 

[bald_head_slick]

System restore not working

Just an added thing Howard. When I first encountered my problems I tried system restore but even though it is enabled, it wouldn't let me restore to any past points for some reason.

 

[Tedster]

if you turned off system restore to fix your computer, it deletes all saved points. Turning it back on starts a fresh slate. This is so your computer won't respawn old viri as well as other reasons.

 

[howard_hopkinso]

if you turned off system restore to fix your computer, it deletes all saved points. Turning it back on starts a fresh slate. This is so your computer won't respawn old viri as well as other reasons.

If you don`t know how to analyse HJT logfiles, I suggest you don`t reply to posts in the security and the web forum. Leave it to someone who does.

 

[howard_hopkinso]

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programmes in your control panel and uninstall anything to do with(if there).

Trust\Trust 730S LCD PowerC@M ZOOM

Close control panel.


Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ICON.EXE

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).


O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)

O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpB31.tmp (file missing)

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)

Fix all 016-DPF entries.

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files(if there).

C:\Program Files\Trust\Trust 730S LCD PowerC@M ZOOM\ICON.EXE

Reboot into normal mode and turn system restore back on.


Regards Howard

 

[bald_head_slick]

Spyfalcon!!

Thanks Howard. My PC seems to be starting okay now even before following your instructions but I done them anyway just to be on the safe side. Was the Trust program a problem?

 

[howard_hopkinso]

Yes. The Trust programme contains a virus.


Regards Howard