Know Your Malware: SpyFalcon Removal

SpyFalcon is a trojan that displays an icon in the system tray. This icon shows a message, which says that the compromised computer is infected with dangerous spyware parasites and asks the user to download and install a removal program, which actually is SpyFalcon, corrupt illegally distributed spyware remover.

Once the user clicks on such message, the trojan opens a web site distributing SpyFalcon. It may also try to download the application. The trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. SpyFalcon automatically runs on every Windows startup.

Related files: spyfalcon.exe, dxmpp.dll, sf.ini

SpyFalcon properties:
Shows commercial adverts
Connects itself to the internet
Hides from the user
Stays resident in background Remove SpyFalcon, removal instructions

Linked by shanmuga Friday, 10th February 2006 7:20AM