Spyware Quake is a trojan that displays an icon in the system tray. SpywareQuake looks like a legitimate application for removal of spyware, but it installs a trojan in an attempt to trick you into buying the software. The SpywareQuake trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. SpywareQuake will also pop-up fake alerts that resemble system alerts in another attempt to get you to buy it.
spywarequakeinstaller.exespywarequake.exeuninst.exedfrgsrv.exemssearchnet.exenvctrl.exeishost.exe ismon.exe isnotify.exe issearch.exe spy-quake2.exewin3.tmp.exewin9.tmp.exeSpywareQuakeInstaller[1].exe
ywbicim.dllwfkduei.dllhvnwm.dllimfdfcj.dllyhbdupd.dllstickrep.dllsivudro.dllxenadot.dlldvdcap.dllsuprox.dllmsvcp71.dllmsvcr71.dllautodisc32.dll bpvcou.dll dnefhw.dll erxbx.dll guxxa.dll gvfsc.dll hvcycg.dll hzclqhc.dll jevtxpg.dll kkqfb.dll lwpfwjb.dll mzoeut.dll ofcukiz.dll ornzq.dll oybgrql.dll pmnqguh.dll rmzdzx.dll tnvocyn.dll qrucmr.dll vhywj.dll viwpzla.dll vpxnk.dll xuefh.dll yfysupa.dll yephk.dll yvvdj.dll zlara.dll fhmfes.dll jpqet.dll viruxz.dll vwlummc.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpywareQuakeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerE2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D661173EE-FA31-4769-97D4-B556B5D09BDA4DA4616D-7E6E-4FD9-A2D5-B6C535733E22HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpywareQuakeCurrentVersionAppPathsSpywareQuake.exe:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpywareQuake:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe/h"CurrentVersionUninstallSpywareQuakeDisplayName:"SpywareQuake2.0"CurrentVersionUninstallSpywareQuakeUninstallString:"percentprogramfilespercentSpywareQuakeuninst.exe"CurrentVersionUninstallSpywareQuakeDisplayIcon:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe"CurrentVersionUninstallSpywareQuakeDisplayVersion:"2.0"CurrentVersionUninstallSpywareQuakeNSIS:StartMenuDir:"SpywareQuake"CurrentVersionUninstallSpywareQuakeURLInfoAbout:"http://www.spywarequake.com"CurrentVersionUninstallSpywareQuakePublisher:"SpywareQuake.com"HKEY_LOCAL_MACHINESOFTWARESpywareQuakeefid:"1"HKEY_LOCAL_MACHINESOFTWARESpywareQuakeLanguage:"1033"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpyQuake2.comSOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskSchedulerEA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2ESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskSchedulerAC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E5B55C4E3-C179-BA0B-B4FD-F2DB862D62022DD8D482-8F1C-4180-AA8E-9D5819E5F2EA411F83B1-A0EC-4155-AF99-0137F5EFB2704E3645AF-7A81-4F83-9B8C-1E4F930D873F61032A65-2371-4C89-B5BB-DF73090FB5EA66189AF2-7726-46E8-8628-0F95AB8547927A2F6251-6C99-4DA5-9827-954EB45DCB8282C6C396-DD7B-4CE5-B668-C0087D1F3A1F853E0D78-F4C2-47CB-A3F5-A774DA60DFCD94786C47-EB3F-4BD5-A66B-0D49E2C905419989A9BC-9828-467E-AF06-E3B279E6E97BB2B3702A-5425-489E-A3AF-EDCCAFEBA019C1C56112-2B2E-4D3C-8CFC-7E10C77FACEFD01D4AAB-22C5-427F-A941-C4B65A3D8A23DDB0D689-FAE0-4165-9F7C-877602F9DD66E5AD5BD5-C710-45E0-ABD3-E770FE85DAE8EB5CA3AF-26C1-467B-9A55-2820E0451AAB5E05EA9F-1EA7-4D0B-A09B-D5E29EC758B9MicrosoftWindowsCurrentVersionApp PathsSpy-Quake2.exeSpyQuake2.com89e4aaba-3b21-49b3-b922-8ca35193c68e210b4043-35ca-4aa0-8796-191f9663dfb3EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2EAC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E189518DF-7EBA-4D31-A7E1-73B5BB60E8D523D627FE-3F02-44CF-9EE1-7B9E44BD9E1343CFEFBE-8AE4-400E-BBE4-A2B61BB140FB5790B963-23C5-43C1-BCF5-01C9B5A3E44E5D42DDF4-81EB-4668-9951-819A1D5BEFC876D06077-D5D3-40CA-B32D-6A67A7FF3F0686C7E6C3-EC47-44E5-AA08-EE0D0A25895F9283DAC1-43F5-4580-BF86-841F22AF2335AE90CAFC-09D4-47F0-9E11-CE621C424F08BA397E39-F67F-423F-BC6E-65939450093ABEC8A83D-01D4-4F15-B8A9-4B4AB24253A7C4EEDC19-992D-409A-B323-ED57D511AFA5DD90F677-D205-4F70-9014-659614AABCB2E3DF91F3-F24F-441E-9001-D61F36024322F459EADB-5903-48D5-864C-2B7B46AB1424FC4EDF66-0547-4F1A-AE96-7CFCAD711C90MicrosoftWindowsCurrentVersionApp PathsSpywareQuake.exeSpywareQuake