new install needed?

  • Thread starter Thread starter kallaloch
  • Start date Start date
K

kallaloch

i have been hit with a 'falcon spyware" they want $19 to send a removal
program. i tried to delete .dll file associated with it and in the process,
i now get an error message i have reinstalled xp pro too many times and need
to get an auth. number. is there a way to get to the c:/ drive to copy some
files so i can do a clean install? i can't boot to safe mode to try and get
the files. thanks
 
kallaloch said:
i have been hit with a 'falcon spyware" they want $19 to send a
removal program. i tried to delete .dll file associated with it and
in the process, i now get an error message i have reinstalled xp pro
too many times and need to get an auth. number. is there a way to get
to the c:/ drive to copy some files so i can do a clean install? i
can't boot to safe mode to try and get the files. thanks
Click to expand...

Here's some links that will help

http://www.bleepingcomputer.com/forums/topic43659.html

http://forums.majorgeeks.com/showthread.php?t=85077

http://forums.tomcoyote.org/lofiversion/index.php/t57986.html

http://www.google.com/search?hl=en&q=remove+spyfalcon&btnG=Google+Search
 
Check out the links Kerry posted--they're good links. Unfortunately in
my opinion getting spyware nearly always equates to just reformatting
and re-installing. Really bad malware bores itself pretty deep and
getting rid of it often is more of a headache than re-installing.

I use a program called Acronis True Image--it's costly but what it does
is allows you to create an 'image' of your drive/partition. I don't
use it as a backup tool--but as a reset button of sorts. You said
you've had to re-install and re-activate XP too many times which is
something I am familiar with as I like to have a clean install of
Windows once a year.

However, what I did was install Windows XP fresh, clean, and then I
activated it, and before doing anything else I made an image. Then I
installed all the Microsoft patches and made a second image.

Now, anytime I need to 'reset' or just want to start clean I can
restore from XP just activated or XP patched. No more activating every
time.

I know that's not really helping your situation directly--Kerry aptly
did that. I'm just giving a tip as I'm sure there will arise another
time when you get infected, it happens to the best of us, but at least
you'll be ready.

As for backup software, I use and recommend Cobian--you can even do
nightly incremental backups easily. Which, combined with True Image,
will allow you complete backup coverage. =) Of course you will have to
re-install all your applications...then again you could install them
all once and make another image. ;)

Take care =)
 
i thank you for the help and input, when i get back to that computer i will
give it a go.
 
kallaloch said:
i have been hit with a 'falcon spyware" they want $19 to send a removal
program. i tried to delete .dll file associated with it and in the process,
i now get an error message i have reinstalled xp pro too many times and need
to get an auth. number. is there a way to get to the c:/ drive to copy some
files so i can do a clean install? i can't boot to safe mode to try and get
the files. thanks
Click to expand...


Formatting the hard drive to solve a virus or spyware problem is
rather like using an axe to trim one's fingernails. Sure, it'll
probably get the job done, but it's rather messy...., and almost always
unnecessary.

To deal with issues caused by any sort of "adware" and/or
"spyware," such as Gator, Comet Cursors, Smiley Central, Xupiter, Bonzai
Buddy, or KaZaA, and their remnants, that you've deliberately (but
without understanding the consequences) installed, two products that are
quite effective (at finding and removing this type of scumware) are
Ad-Aware from www.lavasoft.de and SpyBot Search & Destroy from
www.safer-networking.org/. Both have free versions. It's even possible
to use SpyBot Search & Destroy to "immunize" your system against most
future intrusions. I use both and generally perform manual scans every
week or so to clean out cookies, etc.

Additionally, manual removal instructions for the most common
varieties of scumware are available here:

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml

More information and assistance is available at these sites:

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

The Parasite Fight
http://www.aumha.org/a/parasite.htm

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Is life so dear or peace so sweet as to be purchased at the price of
chains and slavery? .... I know not what course others may take, but as
for me, give me liberty, or give me death! -Patrick Henry
 
I'm not sure how taking 10 mins to restore from an image is more
'messy' than hunting down spyware entry by entry but hey, there's a lot
I don't understand.

Tests done at Leo Laporte's CallForHelp shows manual removal is the
only effective method of spyware removal as both Spybot and Ad-aware
had left remnants of spyware they deliberately put on a machine despite
claiming the spyware was removed.

The rest of your post I agree with whole heartedly--being pro-active is
the key.

Mike =)
 
I'm not sure how taking 10 mins to restore from an image is more
'messy' than hunting down spyware entry by entry but hey, there's a lot
I don't understand.
Click to expand...

I wouldn't say it's more messy, but like Bruce said, usually unnecessary.
When was the last time you updated your image ? Do you create a new image
after every s/w install ?

The image route may be a good way if......

1) You plan from Day 1 to do that periodically, meaning you set up a
routine in which you make images regularly, to minimize lost
configuration data/programs if it is necessary to restore.

2) You structure your 'data' storage for it, storing ALL of your data on
a non-system drive so the most recent data is not destroyed on a restore.

If those 2 items are addressed, that could be a good way for this
situation to be handled.

'Reformat and re-install' or 'Restore' (if it's an OEM machine) is called
out to quickly most of the time, especially by OEM support members. Most
users do not back up their data and are crushed when they find out that
those 100's (or 1000's) of pictures, they got off their digital camera's
will be lost, or all of their e-mail.
 
Back
Top