infected by Spy Falcon

[Broadkipa]

my son has infected his computer with some malware called Spy Falcon. It makes you think that it a anti virus prog but it is more of a virus itself. I keep getting pop ups and god knows what apearing all the time. Here is what I have done so far to try to gat rid of it. I have run a full sweep with Kaspersky labs anti virus software which was allready installed on this compiter anyway and found a trojan and deleted it but still its there. I have installed and run Webroot spysweeper which also found some files and deleted them but still its there. I have downloaded a trial ver of spy doctor which finds lots of stuff in the registry but wont delete them unless I buy the full program which is fair enough but how do I know that that will be the end of it. I have manualy deleted all files found by spy doctor and got a clean sweep but it comes back after a reboot. Where the hell do these Bas**rds hide the files that keep this thing coming back:disgust:
what files does windows run when it starts and how can I find out where they are, I have used Msconfig to disable start up progs and start up in the program menu . You could say I'm at the end of my tether and I think a fresh install is going to be the only way to get rid of this thing.
Oh and I have tried the suggestions of various web sites that I found by doing a search in Google but none work because I think this thing has been updated since the fixes were published.
If any one can help here I would be very grateful and I hope to goodness that no one else gets it.:|

 

[mechBgon]

Do not give those extortionists a red cent :| Start with this, which I've heard works well against SpyFalcon and its clones: http://www.omnicast.net/~tmcfadden/scan.txt Follow the directions step by step. The scanning will take a while.

Also, switch Kaspersky to the Extended Databases if you have it installed. Configuration instructions, with video clip. Do an update, then scan with Kaspersky in Safe Mode after the other scan.

 

[Broadkipa]

thanks for the swift reply, gonna try that right now

 

[Broadkipa]

Thanks mechBgon your link seems to have done the trick, I have spent nearly all day tring to get rid of that bloody thing and at last it looks like it's gone. Thanks again mechBgon

 

[mechBgon]

Originally posted by: Broadkipa
Thanks mechBgon your link seems to have done the trick, I have spent nearly all day tring to get rid of that bloody thing and at last it looks like it's gone. Thanks again mechBgon

That's good news

 

[whitedog2]

You may also try system restore. Worked for me.