Spyware Quake is a trojan that displays an icon in the system tray. Spyware Quake looks like a legitimate application for removal of spyware, but it's installed by a trojan in an attempt to trick you into buying it. The trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. Spyware Quake will also pop-up fake alerts that resemble system alerts in another attempt to get you to buy it.
spywarequakeinstaller.exespywarequake.exeuninst.exedfrgsrv.exemssearchnet.exenvctrl.exe
stickrep.dllmsvcp71.dllmsvcr71.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpywareQuakeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerE2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D661173EE-FA31-4769-97D4-B556B5D09BDA4DA4616D-7E6E-4FD9-A2D5-B6C535733E22HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpywareQuakeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPathsSpywareQuake.exe:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpywareQuake:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe/h"CurrentVersionUninstallSpywareQuakeDisplayName:"SpywareQuake2.0"CurrentVersionUninstallSpywareQuakeUninstallString:"percentprogramfilespercentSpywareQuakeuninst.exe"CurrentVersionUninstallSpywareQuakeDisplayIcon:"percentprogramfilespercentSpywareQuakeSpywareQuake.exe"CurrentVersionUninstallSpywareQuakeDisplayVersion:"2.0"CurrentVersionUninstallSpywareQuakeNSIS:StartMenuDir:"SpywareQuake"CurrentVersionUninstallSpywareQuakeURLInfoAbout:"http://www.spywarequake.com"CurrentVersionUninstallSpywareQuakePublisher:"SpywareQuake.com"HKEY_LOCAL_MACHINESOFTWARESpywareQuakeefid:"1"HKEY_LOCAL_MACHINESOFTWARESpywareQuakeLanguage:"1033"HKEY_LOCAL_MACHINESOFTWAREClassesInterface189518DF-7EBA-4D31-A7E1-73B5BB60E8D5KEY_LOCAL_MACHINESOFTWAREClassesInterface23D627FE-3F02-44CF-9EE1-7B9E44BD9E1343CFEFBE-8AE4-400E-BBE4-A2B61BB140FB5790B963-23C5-43C1-BCF5-01C9B5A3E44E5D42DDF4-81EB-4668-9951-819A1D5BEFC876D06077-D5D3-40CA-B32D-6A67A7FF3F0686C7E6C3-EC47-44E5-AA08-EE0D0A25895F9283DAC1-43F5-4580-BF86-841F22AF233AE90CAFC-09D4-47F0-9E11-CE621C424F08BA397E39-F67F-423F-BC6E-65939450093ABEC8A83D-01D4-4F15-B8A9-4B4AB24253A7C4EEDC19-992D-409A-B323-ED57D511AFA5DD90F677-D205-4F70-9014-659614AABCB2E3DF91F3-F24F-441E-9001-D61F36024322F459EADB-5903-48D5-864C-2B7B46AB1424FC4EDF66-0547-4F1A-AE96-7CFCAD711C90