61. by Guest. 2006-03-11 19:03:19
Managed to delete SpyFalcon after much frustration and many tries. Norton Antivirus (Symantec), Windows Defender – Beta 2 (Microsoft), and Ad Aware (Lavasoft) all seemed to work about equally well. All left ginuerep.dll untouched. The latter two are free. IMPORTANT: The computer must be in the COMMAND PROMPT version of Safe mode to delete ginuerep.dll, since the file continues to run in the GUI versions and cannot be deleted. ginuerep.dll cannot be unregistered because it is not registered.
62. by Guest. 2006-03-11 14:03:46
I was able to fix my version with the following
- boot to safe mode
- use process explorer (sysinternals) to kill the thread module running in "explorer.exe" called
ginuerep.dll, this process is the one that keeps rewriting the registry keys. just locate it on the threads tab and push the kill button for the module.
- delete all files listed above, would not delete ginuerep.dll, delted all *.tmp from system32
- follow all instructions above and delete all instances of "ginuerep.dll" in the registry
- denied everyone full control to the file ginuerep.dll with NTFS (got error, but it worked)
- reboot to safe mode again and now I was able to delete ginuerep.dll. after that reboot normally and it should be gone
- also go to control panel\internet options and change the home page back
- then in XP SP2 or higher, go to "manage add ons" and disable the security toolbar
you may also want to check the default search settings or other possible redirection
63. by Guest. 2006-03-11 10:03:20
well here is what I have so far, I did the manual removal, and cleared my system, however, it came back the very next day... well after watching the started and seeing where what programs load into, I found that all these files load into explorer.exe so I opened taskman and closed explorer, and did not reopen it. Then I startedto remove the files, to no avail, they just came back.
64. by Guest. 2006-03-11 06:03:35
If you were a woman i would definitely kiss you! Thank you thank you thank you!
65. by Guest. 2006-03-10 20:03:55
Call the 800 number from a payphone, it costs them 80 cents per call. After it connects, dial again. Repeat for every time you had to reboot!
66. by Guest. 2006-03-10 07:03:01
I did not have dxmpp.dll either, only ginuerep.dll. I never clicked the red x to d/l the Spyfalcon program and had no dxmpp.dll, any of the other files or registry changes.
67. by Guest. 2006-03-09 20:03:20
Can not locate the dxmpp.dll file!
68. by Guest. 2006-03-09 20:03:21
thanks a lot.
69. by Guest. 2006-03-09 19:03:48
Sign on as administrator then delete ginuerep.dll. Worked for me, too.
70. by Guest. 2006-03-08 22:03:13
i cant get rid of the red x it keeps alerting me of a virus how can i delete this i tryed to delete the fiole ginuerep.dll but it wouldnt let me someone please help
71. by Guest. 2006-03-08 19:03:06
Thank you. I had SpyFalcon. it made me mad .
Thank you.
72. by Guest. 2006-03-08 02:03:36
Hey I found that if you delete ginuerep.dll
that will get rid of that stupid red dot wirh the x thing in the tray. do not forget to do this in safe mode.
Cheers
73. by Guest. 2006-03-06 20:03:28
Some of the names of the fils in the index appear to have been changed. I could not locate several of them.
74. by Guest. 2006-03-06 15:03:06
Restart P.C in safe mode Delete SF in Add/Remove programmes. Then go to C:programmes find file for SF delete it if its there. then go to C;Windows/ system 32 and find this file dxmpp.dll delete it. If you cannot delete it Log Out and Log in on administrator find the file again and delete it. Before coming out or restarting your P.C click all programmes/Accessories/ System tools/Disc Clean Up. Allow the programmes to work depending on the size of your drive and files upon it. Once done restart P.C and you should find now SF is gone as well as those icons in system tray.
75. by Guest. 2006-03-06 14:03:08
This is a real pain in the neck Spy -Ware i had it on my system for some time removing it in add remove programmes only to find it getting back in and restarting and those annoying icons in the system tray as well as those pop ups which contain dummy files of websites you have visited. The persons who are responsible for this threat should be reported to the Police or your ISP as they are breaking the Law and are stealing information from you.
I have however finally removed this rubbish from my P.C and no longer have those annoying icons in the system tray popping up every now and again.
76. by Guest. 2006-03-05 12:03:43
I have cleaned my PC of all the above files, checked several times, and the flashing icon still remains... Hmm...I do hope it just disapears like the other guys did...
77. by Guest. 2006-03-04 04:03:35
"I think i have succeeded in removing spyfalcon (all spyfalcon registry keys, files, etc gone) but still it shows the icon in system tray. Also, it doesnt try to download itself anymore, eventhough i turn firewall off. Also spyware doctor doesnt find it anymore. Am i free of spyfalcon? is the icon in system tray something i just have to live with? (the icon can be hidden in XP)"
Edit: The icon is gone... i dont know how and why but its gone... im so 1337 :D
78. by Guest. 2006-03-04 01:03:00
ok hey thanks you so much i followed this
Win XP
I started in SAFE MODE with COMMAND PROMPT
I went to the PROGRAM FILES folder where SPY FALCON resides
I took a peek at the contents of the Spy Falcon folder and found that there were several more files listed than what appears in normal Windows mode. Including a couple of DLLs and a 54kb txt blacklist text file.
Step back to the PROGRAM FILES folder if you were curious enough to take a peek at the contents.
REMDIR SPYFALCON /S
This REMoves the DIRectory and all Subfolders.
Thats it.. over and done with. The two DLLs listed came up with mixed results
- Yahoo programs
- Microsoft necessary files
- Spy Axe, Spy Falcon, Backdoor trojan DLL
The key factor is WHERE these files are located.
I hope this helps speed along someone elses recovery.
and didnt grab any virus removal programs but i still got the windows world and that red X popping up do you know how i can remove it it keeps pooping up with messages
79. by Guest. 2006-03-03 10:03:48
I think i have succeeded in removing spyfalcon (all spyfalcon registry keys, files, etc gone) but still it shows the icon in system tray. Also, it doesnt try to download itself anymore, eventhough i turn firewall off. Also spyware doctor doesnt find it anymore. Am i free of spyfalcon? is the icon in system tray something i just have to live with? (the icon can be hidden in XP)
80. by Guest. 2006-03-02 01:03:31
Thank you so much for the guidelines to remove Spyfalcon. You saved me money had I contacted Microsoft.
Boy this damn trojan causes dialer to start up and disconnect when trying to download scan engines and Task Manager window has no X at right top to close it. Only way to close TM is in the tray. Also, the dialer disconnects when activated. This is a hell of a problem until one can safely remove this program, then my computer runs normally. By the way, Netscape did not default to Spyfalcon web page, only IE.
Thanks Again
Managed to delete SpyFalcon after much frustration and many tries. Norton Antivirus (Symantec), Windows Defender – Beta 2 (Microsoft), and Ad Aware (Lavasoft) all seemed to work about equally well. All left ginuerep.dll untouched. The latter two are free. IMPORTANT: The computer must be in the COMMAND PROMPT version of Safe mode to delete ginuerep.dll, since the file continues to run in the GUI versions and cannot be deleted. ginuerep.dll cannot be unregistered because it is not registered.
62. by Guest. 2006-03-11 14:03:46
I was able to fix my version with the following
- boot to safe mode
- use process explorer (sysinternals) to kill the thread module running in "explorer.exe" called
ginuerep.dll, this process is the one that keeps rewriting the registry keys. just locate it on the threads tab and push the kill button for the module.
- delete all files listed above, would not delete ginuerep.dll, delted all *.tmp from system32
- follow all instructions above and delete all instances of "ginuerep.dll" in the registry
- denied everyone full control to the file ginuerep.dll with NTFS (got error, but it worked)
- reboot to safe mode again and now I was able to delete ginuerep.dll. after that reboot normally and it should be gone
- also go to control panel\internet options and change the home page back
- then in XP SP2 or higher, go to "manage add ons" and disable the security toolbar
you may also want to check the default search settings or other possible redirection
63. by Guest. 2006-03-11 10:03:20
well here is what I have so far, I did the manual removal, and cleared my system, however, it came back the very next day... well after watching the started and seeing where what programs load into, I found that all these files load into explorer.exe so I opened taskman and closed explorer, and did not reopen it. Then I startedto remove the files, to no avail, they just came back.
64. by Guest. 2006-03-11 06:03:35
If you were a woman i would definitely kiss you! Thank you thank you thank you!
65. by Guest. 2006-03-10 20:03:55
Call the 800 number from a payphone, it costs them 80 cents per call. After it connects, dial again. Repeat for every time you had to reboot!
66. by Guest. 2006-03-10 07:03:01
I did not have dxmpp.dll either, only ginuerep.dll. I never clicked the red x to d/l the Spyfalcon program and had no dxmpp.dll, any of the other files or registry changes.
67. by Guest. 2006-03-09 20:03:20
Can not locate the dxmpp.dll file!
68. by Guest. 2006-03-09 20:03:21
thanks a lot.
69. by Guest. 2006-03-09 19:03:48
Sign on as administrator then delete ginuerep.dll. Worked for me, too.
70. by Guest. 2006-03-08 22:03:13
i cant get rid of the red x it keeps alerting me of a virus how can i delete this i tryed to delete the fiole ginuerep.dll but it wouldnt let me someone please help
71. by Guest. 2006-03-08 19:03:06
Thank you. I had SpyFalcon. it made me mad .
Thank you.
72. by Guest. 2006-03-08 02:03:36
Hey I found that if you delete ginuerep.dll
that will get rid of that stupid red dot wirh the x thing in the tray. do not forget to do this in safe mode.
Cheers
73. by Guest. 2006-03-06 20:03:28
Some of the names of the fils in the index appear to have been changed. I could not locate several of them.
74. by Guest. 2006-03-06 15:03:06
Restart P.C in safe mode Delete SF in Add/Remove programmes. Then go to C:programmes find file for SF delete it if its there. then go to C;Windows/ system 32 and find this file dxmpp.dll delete it. If you cannot delete it Log Out and Log in on administrator find the file again and delete it. Before coming out or restarting your P.C click all programmes/Accessories/ System tools/Disc Clean Up. Allow the programmes to work depending on the size of your drive and files upon it. Once done restart P.C and you should find now SF is gone as well as those icons in system tray.
75. by Guest. 2006-03-06 14:03:08
This is a real pain in the neck Spy -Ware i had it on my system for some time removing it in add remove programmes only to find it getting back in and restarting and those annoying icons in the system tray as well as those pop ups which contain dummy files of websites you have visited. The persons who are responsible for this threat should be reported to the Police or your ISP as they are breaking the Law and are stealing information from you.
I have however finally removed this rubbish from my P.C and no longer have those annoying icons in the system tray popping up every now and again.
76. by Guest. 2006-03-05 12:03:43
I have cleaned my PC of all the above files, checked several times, and the flashing icon still remains... Hmm...I do hope it just disapears like the other guys did...
77. by Guest. 2006-03-04 04:03:35
"I think i have succeeded in removing spyfalcon (all spyfalcon registry keys, files, etc gone) but still it shows the icon in system tray. Also, it doesnt try to download itself anymore, eventhough i turn firewall off. Also spyware doctor doesnt find it anymore. Am i free of spyfalcon? is the icon in system tray something i just have to live with? (the icon can be hidden in XP)"
Edit: The icon is gone... i dont know how and why but its gone... im so 1337 :D
78. by Guest. 2006-03-04 01:03:00
ok hey thanks you so much i followed this
Win XP
I started in SAFE MODE with COMMAND PROMPT
I went to the PROGRAM FILES folder where SPY FALCON resides
I took a peek at the contents of the Spy Falcon folder and found that there were several more files listed than what appears in normal Windows mode. Including a couple of DLLs and a 54kb txt blacklist text file.
Step back to the PROGRAM FILES folder if you were curious enough to take a peek at the contents.
REMDIR SPYFALCON /S
This REMoves the DIRectory and all Subfolders.
Thats it.. over and done with. The two DLLs listed came up with mixed results
- Yahoo programs
- Microsoft necessary files
- Spy Axe, Spy Falcon, Backdoor trojan DLL
The key factor is WHERE these files are located.
I hope this helps speed along someone elses recovery.
and didnt grab any virus removal programs but i still got the windows world and that red X popping up do you know how i can remove it it keeps pooping up with messages
79. by Guest. 2006-03-03 10:03:48
I think i have succeeded in removing spyfalcon (all spyfalcon registry keys, files, etc gone) but still it shows the icon in system tray. Also, it doesnt try to download itself anymore, eventhough i turn firewall off. Also spyware doctor doesnt find it anymore. Am i free of spyfalcon? is the icon in system tray something i just have to live with? (the icon can be hidden in XP)
80. by Guest. 2006-03-02 01:03:31
Thank you so much for the guidelines to remove Spyfalcon. You saved me money had I contacted Microsoft.
Boy this damn trojan causes dialer to start up and disconnect when trying to download scan engines and Task Manager window has no X at right top to close it. Only way to close TM is in the tray. Also, the dialer disconnects when activated. This is a hell of a problem until one can safely remove this program, then my computer runs normally. By the way, Netscape did not default to Spyfalcon web page, only IE.
Thanks Again