Spy Falcon

matter · #1 02-08-2006, 11:40 PM

This morning I found I had picked up some spyware called "Spy Falcon". There are little error boxes popping up every 30 seconds or so in the lower right corner of the screen (they look like genuine errors from windows, but are not) telling me "possible harmful infection was detected on your computer ...blah blah blah. To remove click here" Even when I try to close the box, I'm redirected to Spy Falcon's web page and given a dummy list of programs that were found, and in order to get rid of them, I need to buy their program. Then, no matter how many times I remove the spyfalcon software from the control panel, it installs itself again. I'm also getting annoying popups that show up in explorer every once in a while. Obviously the program causing the problem is the same one offering the fix. Adaware Se and Webroot have detected nothing, and I'm stumped. Can anyone help me?

Highett · #2 02-09-2006, 05:51 AM

Quote:

Originally Posted by matter

This morning I found I had picked up some spyware called "Spy Falcon". There are little error boxes popping up every 30 seconds or so in the lower right corner of the screen (they look like genuine errors from windows, but are not) telling me "possible harmful infection was detected on your computer ...blah blah blah. To remove click here" Even when I try to close the box, I'm redirected to Spy Falcon's web page and given a dummy list of programs that were found, and in order to get rid of them, I need to buy their program. Then, no matter how many times I remove the spyfalcon software from the control panel, it installs itself again. I'm also getting annoying popups that show up in explorer every once in a while. Obviously the program causing the problem is the same one offering the fix. Adaware Se and Webroot have detected nothing, and I'm stumped. Can anyone help me?

matter,

Try using this:

XoftSpy

Code:

http://www.xoftspy.net/xoftspy/lp/13/

if it comes back, shut down system restore and do it again

Should that not work try this:

Note Be care full what you remove with this as you can cause system problems if you remove the wrong thing.

Go to their help forum and post the scan logs if you are not sure.

HijackThis

Code:

http://www.spywareinfo.com/

parpes · #3 02-09-2006, 07:12 PM

shoe, another pesky spyware treat that came to my computer unasked visiting some site. Here is webpage that helped me to remove spyfalcon:remove spyfalcon

Gurant · #4 02-10-2006, 06:59 AM

I have downloaded and registerd XoftSpy. I have done 8 scans and it allways finds 7-15 viruses. It did not remove spyfalcon and the annoying Virus-alert message is still there!

Flaxen · #5 02-10-2006, 11:22 AM

A complete removal guide for SpyFalcon can be found here:

How To Remove Spyfalcon And Dxmpp.dll

It does not require any purchase of software and will get your system clean again.

arcamdelta · #6 02-10-2006, 04:02 PM

i had the same problem, but i found out how to remove it from the system without having to restore or reboot, basically you need to find a dll called dxmpp.dll and remove it, you will have to do this on administrator log in, because explorer.exe will tell you that the dll is in use and cannot be deleted, then you need to remove HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURR ENTVERSION\EXPLORER\SHAREDTASKSCHEDULER and remove any unknown classis
then using a tune up manager run a registry clean this will then inturn delete the active-x controls the spyware uses, hope that is of some use to you guys, and as far as the company that provides the software, i will be contacting the police about there illegal activities

wwwGoadTeamcom · #7 02-10-2006, 10:05 PM

Thanks Flaxen,

I used the advise and serivce you recomended and it worked like a charm. Thanks for the info I really appreciate it. I would love to get my hands arround the necks of the *#$#@ A#& #*#@&&&$ that got that crap on my computer. If you are ever thinking about moving to or from the Las Vegas area, please let me know and I will cut you a KILLER DEAL.

Thanks again,

John Goad, Jr. of The Goad Team
www.GoadTeam.com

Phippy · #8 02-10-2006, 10:17 PM

A generic removal "rule", I always run AdAware, Spybot and Microsoft's anti spyware programs and one of those generally removes most problems. Make sure you update each with the latest definitions before you run them.

That by no means removes all, but it's a good start.

AL666 · #9 02-13-2006, 04:57 AM

I'd never been infected with Spyware before yesterday when I got Spy Falcon

Thankfully I found this forum and got rid of it quickly

That'll teach me to use IE and not have a firewall installed

Thanks for your help Flaxen, worked a treat

AL

biggup1234 · #10 02-13-2006, 05:36 AM

Thankyou so much Flaxen, i was so worried when this Spy Falcon kept appearing on my computer, but i managed to stumble across this forum and find your link to that walkthrough of how to remove it, worked a treat!!

All hail Flaxen!!!

Caedes · #11 02-13-2006, 09:51 AM

yeah, most sincere thanks to the one who wrote that guide, it not only helped me getting rid of that damn spyfake-programm.
i wasnt able to change the desktop background and now i can!

thanks again, keep up the good work flaxen!

alex1337 · #12 02-13-2006, 05:42 PM

i did what the instructions said to do, and spy falcon is not on my computer
however, whenever i run a spyware program, it still detects the spyware on my computer
there are 2 files in system 32, ncompat.tlb and mscornet.exe that cannot be deleted, but come up as spyware
any ideas?
thanks

alex1337 · #13 02-13-2006, 08:13 PM

i just logged in on safe mode and deleted those too
thanks for the info

homefry · #14 02-13-2006, 09:11 PM

My computer has Spy Falcon as of today...we found this forum, and printed out the directions on how to remove SpyFalcon and dxmpp.dll...

We are getting stuck at step 16:

as the various screens pop up---we continually get a dialog box that says "No disk in drive, please insert disk" We press continue, and when it gets to the final screen---we are stuck in a loop receiving the above error. In the command area, we will get Device is Not Ready.

We cannot get to the point, where the instructions say that "the desktop will disappear and text will scroll across the screen"

frustrating as we have gotten so close to completing this-but can't get to step #17

Any help would be appreciated!

Thx

Jon Sykes · #15 02-16-2006, 09:48 PM

Hello...
I was browsing the internet and Norton informed me that an attack was recently blocked. Well, in about 3 minutes, that same pop up showed about 6 times. So im guessing that someone tried to attack me. All of a sudden IE closes and the lil thing at bottom right says my comp is infected. Well, i qiuckly downloaded microsoft's antivirus thing. I ran it and got "Zolob trojan downloader". I saw that spy falcon was on my desktop so i uninstalled it. after a few anti virus programs ran, i had to reboot
SF was still there. (So i read this thread, now i know its bogus)
Does anyone know if this is connected to my "Zolob" trojan?
Please give me some info!
I know almost nothing about Zolob i tried google and get nothing