41. by Guest. 2006-03-11 14:03:46
I was able to fix my version with the following
- boot to safe mode
- use process explorer (sysinternals) to kill the thread module running in "explorer.exe" called
ginuerep.dll, this process is the one that keeps rewriting the registry keys. just locate it on the threads tab and push the kill button for the module.
- delete all files listed above, would not delete ginuerep.dll, delted all *.tmp from system32
- follow all instructions above and delete all instances of "ginuerep.dll" in the registry
- denied everyone full control to the file ginuerep.dll with NTFS (got error, but it worked)
- reboot to safe mode again and now I was able to delete ginuerep.dll. after that reboot normally and it should be gone
- also go to control panelinternet options and change the home page back
- then in XP SP2 or higher, go to "manage add ons" and disable the security toolbar
you may also want to check the default search settings or other possible redirection
42. by Guest. 2006-03-11 19:03:19
Managed to delete SpyFalcon after much frustration and many tries. Norton Antivirus (Symantec), Windows Defender – Beta 2 (Microsoft), and Ad Aware (Lavasoft) all seemed to work about equally well. All left ginuerep.dll untouched. The latter two are free. IMPORTANT: The computer must be in the COMMAND PROMPT version of Safe mode to delete ginuerep.dll, since the file continues to run in the GUI versions and cannot be deleted. ginuerep.dll cannot be unregistered because it is not registered.
43. by Guest. 2006-03-12 23:03:42
I finally got rid of this nasty pest. Started up in safe mode and used "search" in the start menu to locate each program, file and folder and delete them one by one. You will not be able to remove the ginuerep.dll file. This little terd is in the Windows/system 32 folder. I renamed this to a new genirc name and re started the computer in normal road. It could not locate this dll file any longer since I renamed it and everything seems ok now. I then went to windows/system 32 and smoked the generic file and it deleted with no problem.
44. by Guest. 2006-03-16 08:03:49
Thankyou so much. I love you. It has finally gone
45. by Guest. 2006-03-16 22:03:14
Thank you very much for all this great removal information. I had SpyFalcon on my computer for four days and now I am finally rid of it! You all are great, including the guests that wrote in what they did! Thank you all so very much!
46. by Guest. 2006-03-17 08:03:57
hi after reading all the posts i downloaded and paid for webroot spysweeper and i worked
i have just run thru the reg keys and they are not there..
thanks for all the help.........................giles mackay qld
47. by Guest. 2006-03-19 16:03:55
thankyou so much, right now i'm trying ewido and i'll be trying this next!
48. by Guest. 2006-03-20 01:03:03
Steps to clean your system (just like the others said actually):
1. go to safe mode (run>msconfig>boot.ini> check /safeboot) reboot.
2. read above SpyFalcon manual removal. take out all the files like they say.
you will not be able to remove ginuerep.dll just yet. if you can't find some of
the things they tell you to remove no big deal.
3. once you erased all the junk, reboot in safe mode again, now go to c:winntsystem32
and erase the evil file ginuerep.dll.
4. great, you're set. to boot in normal mode, go back to boot.ini and uncheck /safeboot. then
reboot.
hooray.
49. by Guest. 2006-03-20 13:03:03
I have had this problem bofore with a program called "Spyaxe" as well, basicly it is just a reskinned copy of the exact same program. Last time it happened my dad ended up fixing it before I even tryed (It was late when I got the trojan, and I knew exactly what it was the second I got it so I just went to bed knowing that it would be too much of a hassle to figure out at the time.) I am assuming that its pretty much exactly the same and shoud work on any "version" of the program (ie. Spyfalcon, Spyaxe ect... I know there are more out there)
50. by Guest. 2006-03-20 19:03:53
Thank you very much for this removeal instruction
51. by Guest. 2006-03-20 21:03:28
thnx for the help of this website that parasite was becoming a pest making my computer slow down everything but its off now
52. by Guest. 2006-03-21 11:03:37
Is there a way we can sue companies like this for all this pain? Thanks this really helped me remove these files.
53. by Guest. 2006-03-21 12:03:01
I have XP and did a system restore to a day prior to spy falcon infecting the computer, and all was fixed within five minutes!
54. by Guest. 2006-03-21 17:03:59
I folowed these steps but even after that was still infected. I used safe boots and clean boots, and even on a clean boot which should not start processes, spy falcon started runnung before I even had a chance to start Windows Exp;orer. A few componen were already in use and could not be deleted. They were not even flagged for deletion on the next startup.
55. by Guest. 2006-03-21 23:03:06
Thanks for the info - managed to get rid of SpyFalcon in a few hours. The key was the suggestion to rename ginuerep.dll in safe mode, then delete the renamed file on next start up.
Also, when you run msconfig, go to the Startup tab and uncheck SpyFalcon. This reduces the number of files you have to delete.
56. by Guest. 2006-03-22 11:03:27
Good site, however, I usd smitRem to remove this nasty little tosser from a Win2000 infected machine. The user of this machine (a friend of mine) had Norton installed. I would not recommend ANYONE using Norton. 1) its a systems hog and (2) it doesnt pick this little blighter up!
Also, Trojan Hunter V4.0 does not pick this up.
Wht the hell do we allow programs like this onto the market! These people who distribute malicious code should be locked up!
57. by Guest. 2006-03-22 18:03:45
ok you have to pay for spydoctor? because its saying for me athat i have to and this is really bad.
58. by Guest. 2006-03-22 22:03:28
Can anyone tell an average Joe how to remove this BS SpyFalcon program? All the posts sound very helpful below but I am worried about doing permanent damage. Can this be explained for dummies like me?
Already something I have done (I htink something I quarantined when I used spydoctor) has screwed up my computer when I turn it on. It says "C:/ not found". Not good.
Also, the address for Spy Falcon is listed above. Is that the real address? Can we go there in the Philippines and destroy this company and the guy listed above?
Cheers.
59. by Guest. 2006-03-23 06:03:22
Can anyone help I have tried to download Spyfaalcon removal tool but I am getting an error message -Error while creating script: A script engine for the specified language can not be created
Any suggestions
60. by Guest. 2006-03-23 09:03:13
spy falcon is a con which messes up your computer, saying it just deletes spyware traces on your computer, but all it does is open a backdoor to all other viruses and is a real horror to delete off your computer. i have deleted it at least 20 times but it just appears again on start up. help. what can i do
I was able to fix my version with the following
- boot to safe mode
- use process explorer (sysinternals) to kill the thread module running in "explorer.exe" called
ginuerep.dll, this process is the one that keeps rewriting the registry keys. just locate it on the threads tab and push the kill button for the module.
- delete all files listed above, would not delete ginuerep.dll, delted all *.tmp from system32
- follow all instructions above and delete all instances of "ginuerep.dll" in the registry
- denied everyone full control to the file ginuerep.dll with NTFS (got error, but it worked)
- reboot to safe mode again and now I was able to delete ginuerep.dll. after that reboot normally and it should be gone
- also go to control panelinternet options and change the home page back
- then in XP SP2 or higher, go to "manage add ons" and disable the security toolbar
you may also want to check the default search settings or other possible redirection
42. by Guest. 2006-03-11 19:03:19
Managed to delete SpyFalcon after much frustration and many tries. Norton Antivirus (Symantec), Windows Defender – Beta 2 (Microsoft), and Ad Aware (Lavasoft) all seemed to work about equally well. All left ginuerep.dll untouched. The latter two are free. IMPORTANT: The computer must be in the COMMAND PROMPT version of Safe mode to delete ginuerep.dll, since the file continues to run in the GUI versions and cannot be deleted. ginuerep.dll cannot be unregistered because it is not registered.
43. by Guest. 2006-03-12 23:03:42
I finally got rid of this nasty pest. Started up in safe mode and used "search" in the start menu to locate each program, file and folder and delete them one by one. You will not be able to remove the ginuerep.dll file. This little terd is in the Windows/system 32 folder. I renamed this to a new genirc name and re started the computer in normal road. It could not locate this dll file any longer since I renamed it and everything seems ok now. I then went to windows/system 32 and smoked the generic file and it deleted with no problem.
44. by Guest. 2006-03-16 08:03:49
Thankyou so much. I love you. It has finally gone
45. by Guest. 2006-03-16 22:03:14
Thank you very much for all this great removal information. I had SpyFalcon on my computer for four days and now I am finally rid of it! You all are great, including the guests that wrote in what they did! Thank you all so very much!
46. by Guest. 2006-03-17 08:03:57
hi after reading all the posts i downloaded and paid for webroot spysweeper and i worked
i have just run thru the reg keys and they are not there..
thanks for all the help.........................giles mackay qld
47. by Guest. 2006-03-19 16:03:55
thankyou so much, right now i'm trying ewido and i'll be trying this next!
48. by Guest. 2006-03-20 01:03:03
Steps to clean your system (just like the others said actually):
1. go to safe mode (run>msconfig>boot.ini> check /safeboot) reboot.
2. read above SpyFalcon manual removal. take out all the files like they say.
you will not be able to remove ginuerep.dll just yet. if you can't find some of
the things they tell you to remove no big deal.
3. once you erased all the junk, reboot in safe mode again, now go to c:winntsystem32
and erase the evil file ginuerep.dll.
4. great, you're set. to boot in normal mode, go back to boot.ini and uncheck /safeboot. then
reboot.
hooray.
49. by Guest. 2006-03-20 13:03:03
I have had this problem bofore with a program called "Spyaxe" as well, basicly it is just a reskinned copy of the exact same program. Last time it happened my dad ended up fixing it before I even tryed (It was late when I got the trojan, and I knew exactly what it was the second I got it so I just went to bed knowing that it would be too much of a hassle to figure out at the time.) I am assuming that its pretty much exactly the same and shoud work on any "version" of the program (ie. Spyfalcon, Spyaxe ect... I know there are more out there)
50. by Guest. 2006-03-20 19:03:53
Thank you very much for this removeal instruction
51. by Guest. 2006-03-20 21:03:28
thnx for the help of this website that parasite was becoming a pest making my computer slow down everything but its off now
52. by Guest. 2006-03-21 11:03:37
Is there a way we can sue companies like this for all this pain? Thanks this really helped me remove these files.
53. by Guest. 2006-03-21 12:03:01
I have XP and did a system restore to a day prior to spy falcon infecting the computer, and all was fixed within five minutes!
54. by Guest. 2006-03-21 17:03:59
I folowed these steps but even after that was still infected. I used safe boots and clean boots, and even on a clean boot which should not start processes, spy falcon started runnung before I even had a chance to start Windows Exp;orer. A few componen were already in use and could not be deleted. They were not even flagged for deletion on the next startup.
55. by Guest. 2006-03-21 23:03:06
Thanks for the info - managed to get rid of SpyFalcon in a few hours. The key was the suggestion to rename ginuerep.dll in safe mode, then delete the renamed file on next start up.
Also, when you run msconfig, go to the Startup tab and uncheck SpyFalcon. This reduces the number of files you have to delete.
56. by Guest. 2006-03-22 11:03:27
Good site, however, I usd smitRem to remove this nasty little tosser from a Win2000 infected machine. The user of this machine (a friend of mine) had Norton installed. I would not recommend ANYONE using Norton. 1) its a systems hog and (2) it doesnt pick this little blighter up!
Also, Trojan Hunter V4.0 does not pick this up.
Wht the hell do we allow programs like this onto the market! These people who distribute malicious code should be locked up!
57. by Guest. 2006-03-22 18:03:45
ok you have to pay for spydoctor? because its saying for me athat i have to and this is really bad.
58. by Guest. 2006-03-22 22:03:28
Can anyone tell an average Joe how to remove this BS SpyFalcon program? All the posts sound very helpful below but I am worried about doing permanent damage. Can this be explained for dummies like me?
Already something I have done (I htink something I quarantined when I used spydoctor) has screwed up my computer when I turn it on. It says "C:/ not found". Not good.
Also, the address for Spy Falcon is listed above. Is that the real address? Can we go there in the Philippines and destroy this company and the guy listed above?
Cheers.
59. by Guest. 2006-03-23 06:03:22
Can anyone help I have tried to download Spyfaalcon removal tool but I am getting an error message -Error while creating script: A script engine for the specified language can not be created
Any suggestions
60. by Guest. 2006-03-23 09:03:13
spy falcon is a con which messes up your computer, saying it just deletes spyware traces on your computer, but all it does is open a backdoor to all other viruses and is a real horror to delete off your computer. i have deleted it at least 20 times but it just appears again on start up. help. what can i do