Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

SpyCrush, a variant of SpyDawn and VirusBurst is a rogue anti-spyware application that tries to goad users into buying its commercial version. Once you have your machine infected, SpyCrush will issue a fake notification stating that your machine is infected with spyware. SpyCrush uses the same EULA as its rogue predecessor VirusBurst. SpyCrush is reported to be very difficult to remove manually and has an ability to recreate itself. SpyCrush is a serious threat and is recommended to be removed immediately.

Automated Detection for SpyCrush

SpyCrush Manual Removal Instructions

Stop SpyCrush system processes:

SpyCrush 3.3.exe
SpyCrush 3.1.exe
SpyCrush 3.2.exe
spycrush.exe

Unregister SpyCrush DLLs:

iwwvh.dll
xedasn.dll
igpfced.dll
iauoi.dll
cdwvhbf.dll
tczij.dll
xikor.dll
ckimzeb.dll
gsrnxgh.dll
yesgnhr.dll
syycum.dll

Remove SpyCrush files:

SpyCrush 3.3.url
SpyCrush 3.3
iwwvh.dll
xedasn.dll
SpyCrush 3.2.url
SpyCrush 3.2
igpfced.dll
iauoi.dll
cdwvhbf.dll
tczij.dll
xikor.dll
Uninstall SpyCrush 3.3.lnk
SpyCrush 3.3 Website.lnk
SpyCrush 3.3.lnk
SpyCrush 3.3.exe
Uninstall SpyCrush 3.1.lnk
SpyCrush 3.1 Website.lnk
SpyCrush 3.1.lnk
SpyCrush 3.1.exe
Uninstall SpyCrush 3.2.lnk
SpyCrush 3.2 Website.lnk
SpyCrush 3.2.lnk
SpyCrush 3.2.exe
ckimzeb.dll
gsrnxgh.dll
yesgnhr.dll
Uninstall SpyCrush 5.1.lnk
SpyCrush 5.1 Website.lnk
SpyCrush.lnk
SpyCrush 5.1.lnk
SpyCrush
syycum.dll
spycrush.exe

Remove SpyCrush registry values:

SpyCrush 3.3
Microsoft\\Windows\\CurrentVersion\\App Paths\\SpyCrush 3.3.exe 3.3
D72322BB-82BF-4C23-B834-90EA8A099FC1
EC4DB87A-A091-4A6D-B14F-69856A033C99
D788C427-3125-4EE6-B6DA-8FDB4FEB7692
D1EE4F9E-7ED5-4838-AD46-57A393D09E91
CF1B8DD1-0374-4E99-8A63-DE041F80F5B4
CF06FDA2-9F4E-4C12-B7E2-4368159BC178
96D36795-387D-4504-A42E-A2DC60684F9D
87032659-2467-431F-8558-35A2CB66F7C7
803BD939-D225-4B05-85F8-CF5EE87D16FE
5DBD9711-CEAF-4C20-9CE2-B17167271C24
344B79D5-D3DB-469B-A31E-AACA1D75B105
2CF3105F-E9AD-4BC2-860B-09DB079D498E
2B491308-39EE-4A1E-8020-D4EF364149F8
25FC01E9-92AC-443F-8496-7E44E0DD04AB
0EF44C21-275E-4614-8564-8C46097A03D9
0E863328-916D-4032-A57D-B4D234830AE8
0890C1D6-DEBD-4CBC-97CD-DFAFB8D06654
SpyCrush 3.2
Microsoft\\Windows\\CurrentVersion\\App Paths\\SpyCrush 3.2.exe 3.2
6EED0372-5666-464F-8D88-2526FFBBED55
FB891917-2617-4660-8015-49A79AC80ACD
F422CDAC-A717-4A09-BB5C-89F36227B465
DDF9E478-7A9E-4A29-AE51-FC0C12072AE7
C8CFBDBF-0072-4C49-8885-6BF47B65ADE3
C7896120-C477-420B-AFDE-E588DE822B58
C2F4EDE7-06F0-4CA7-983B-93BF8FC1585D
BA1A7BC8-AF6E-4638-AAC9-669C703B8783
B9ED75EE-7AFC-482C-8206-944B46221041
B6B02D11-4824-45EF-A8D4-5AD2AFB02264
AED159D6-86C6-489C-A2B2-74B3E94E7744
7E5BB405-74BC-42EF-B693-FF004D0AF1FB
6E11808E-4C2D-4BC6-9815-C86E87CC2923
533F1895-9E5F-4722-97D7-4621633A9721
17D6C6AB-E681-4D19-8363-6CE45105B41E
03C2E255-E86D-44A8-995F-51A8235D9681
01B509DF-7211-4AEF-AF91-5B2185D84C3C
3A57F88E-E4E8-470C-B032-6162923681D5
FEC3BC5A-60C0-414C-8FD4-5C967597C25D
CAAC1FBA-7BBE-4890-8156-D203FEA81D96
C34B689D-78D9-436B-86A1-717CC7172B67
B9211B3D-5FC6-4311-998E-B4138C256532
B3E0E19A-FA96-4BBE-B429-CA4C9D8EC0A9
AF64B18F-C7B6-4FCE-A4E6-4248344A196F
AA4A709C-25B9-4BA5-95AD-3185FEBD9A7F
A9E61BA4-EB7D-4699-8742-2BCFC842CD26
A9E40D6A-D26E-4413-9431-832E42C51C3C
A30A1054-61A4-411E-8E6B-E7EED2917409
7277172E-E708-4168-99F0-DF09FDDF0BE0
67917213-04FB-46AE-ABFB-95CFCDDAF7DF
66EB826C-4A16-40D4-9418-F3D4E319722B
667C305A-10F1-4591-9652-966B41BEE5A1
2CAFAFE4-E098-458F-BCCE-0D8F873C38FC
077B1BF5-5C71-4167-ADCE-5AFD86E00FF5
SpyCrush
Microsoft\\Windows\\CurrentVersion\\App Paths\\SpyCrush.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\spycrush.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellServiceObjectDelayLoad\\{6076D2B1-634C-4685-843B-F826045EA5DC}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_CLASSES_ROOT\\TypeLib\\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\spycrush
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SpyCrush
HKEY_LOCAL_MACHINE\\SOFTWARE\\SpyCrush

Important Disclaimer

SpyCrush is related to:

  » SpyDawn

This entry was posted on Friday, June 1st, 2007 at 8:51 am and is filed under Rogue Anti-Spyware Program, Trojans. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.