x_6985381 Posted March 5, 2006 CID Share Posted March 5, 2006 alright i restarted my computer this morning and a program called "spy falcon" was automaticlly installed, also with other programs, and i've ran ad-aware + trendmicro + cleanup all to see if it would help, it helped a little, nothing much tho still boot's and installs into the computer, any idea's on how to stop this? Link to comment Share on other sites More sharing options...
x_6985381 Posted March 5, 2006 Author CID Share Posted March 5, 2006 a picture of it auto-reseting my internet explorer Link to comment Share on other sites More sharing options...
dn0 Posted March 5, 2006 CID Share Posted March 5, 2006 Hey x, first the basic question- Did you run your spyware and AV programs in Safe Mode yet? Link to comment Share on other sites More sharing options...
x_6985381 Posted March 5, 2006 Author CID Share Posted March 5, 2006 how do i go about running in safe mode? reboot safe mode? i would need instuctions to get into safe mode Link to comment Share on other sites More sharing options...
tommie gorman Posted March 5, 2006 CID Share Posted March 5, 2006 Have you run you Anti Virus and Anti spyware in safe mode with networking, then run ccleaner?Wow he beat me. F-8 after starting reboot. Arrow key up to it. Link to comment Share on other sites More sharing options...
dn0 Posted March 5, 2006 CID Share Posted March 5, 2006 how do i go about running in safe mode? reboot safe mode? i would need instuctions to get into safe mode Correct, re-boot and start pressing the F8 key as the pc is booting up. When that comes up, choose 'safe mode with networking' in case you need to run online scanners. The virus should not start in safe mode. Once booted in safe mode, run your AV and spyware scanners again. Be sure they are all up to date. Try this....... Link to comment Share on other sites More sharing options...
tommie gorman Posted March 5, 2006 CID Share Posted March 5, 2006 Maybe next time! Link to comment Share on other sites More sharing options...
dn0 Posted March 5, 2006 CID Share Posted March 5, 2006 Maybe next time! Sorry - we're posting on top of each other...... Link to comment Share on other sites More sharing options...
tommie gorman Posted March 5, 2006 CID Share Posted March 5, 2006 Can't say he didn't get a quick response! What a forum! Link to comment Share on other sites More sharing options...
x_6985381 Posted March 5, 2006 Author CID Share Posted March 5, 2006 Nothings changed after running in safe mode. Link to comment Share on other sites More sharing options...
tommie gorman Posted March 5, 2006 CID Share Posted March 5, 2006 Try this: http://grisoft.com/doc/112/lng/us/tpl/tpl01 I had problems finding the vcleaner.exe. when in safe mode, not networking, so I downloaded it onto a c.d. and ran it from there, then reboot back to safe mode w/ networking. Then repeat steps as before. You may not see it find anything but it is working. Let me know how it turns out. Link to comment Share on other sites More sharing options...
dn0 Posted March 5, 2006 CID Share Posted March 5, 2006 Nothings changed after running in safe mode. I guess this is a bear to remove after looking around. Try this site for removal instructions: http://www.bleepingcomputer.com/forums/topic43659.html Link to comment Share on other sites More sharing options...
x_6985381 Posted March 5, 2006 Author CID Share Posted March 5, 2006 Great new's All fixed, thank you all for the help much love. -out. -jake. Link to comment Share on other sites More sharing options...
tommie gorman Posted March 5, 2006 CID Share Posted March 5, 2006 OK but what fixed it so we can know. :shock: Link to comment Share on other sites More sharing options...
CA3LE Posted March 6, 2006 CID Share Posted March 6, 2006 If I'm understanding correctly... you have something that is auto executing everytime you log in right? Have you tried to edit HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun in regedit? Just go to [start] then [run] then type "regedit" then thread your way into 'HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun' (you may also want to check in 'HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun')-- once you get there delete anything that looks suspicious. As with any registry modification you may want to backup your registry before making changes, although in this specific portion of your registry there is no harm that can be done.. a mistake will just cause a startup program to no start with windows Let me know if this works Link to comment Share on other sites More sharing options...
.thumb.jpg.8c31542255bb3cc7d7d90c8909679b27.jpg)
Recommended Posts