Not detecting Spyware

[Guest]

I have Windows Onecare, Defender Beta 2 installed on Win XPSP2, with all
Windows Updates etc.

Somehow I got infected with "Spyfalcon". Windows Defender and Onecare did
not prevent this, nor could they remove it without it coming back.

I found some tips on the Web and have gotten rid of most of it.

However I still get an application which is Onecare calls "Universa
Application" and it is blocking it from the Network. This file changes names.
It is located in /Windows/System/ and called "Win#x.tmp.exe" Where # is a
number and x is a letter. If I reboot in safe mode and delete the file it
comes back. If I use defender to terminate the process it restarts.

Defender and Onecare do not detect anything amiss. I downloaded Ad-Aware and
Spybot they also report my machine as clean. I am running out of ideas.

Any suggestions?

 

[Guest]

Submit it via the process noted in Windows Defender Help, or here:
Report a possible spyware problem to Microsoft
http://www.microsoft.com/athome/security/spyware/software/support/reportspyware.mspx

http://castlecops.com/a6514-SpyFalcon_a_nightmare_rebranded.html

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview


Eиçel

 

[Guest]

Thanks, I have submitted the files, but I have already follwed thoese guides
and they cleaned everything but this last problem.

I hope to see it fixed soon. As this app seems to create an inordinate
amount of .tmp 0 byte files that cannot be deleted becasue they are "in use"
even in Safe mode.

 

[Guest]

Hi Mike,

Maybe you could try an online scanner such as:

http://housecall.trendmicro.com/
or
http://www.pandasoftware.com/products/activescan.htm

Good luck!

D.

 

[Guest]

Thats nice and all but, the question remains. Will defender detect and
eliminate spyfalcon anytime soon?

Thanks!