SpyCrush
|
Description:
|
Spyware
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Friday, May 09, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Rogue/Suspect Anti-Spyware Product
"Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "SpyCrush"
Threat Info
View All
Detecting items list:
- Files by Name
%ProgramFiles%\spycrush\crush.db
%ProgramFiles%\spycrush\spycrush.exe
%ProgramFiles%\spycrush\spycrush.url
%ProgramFiles%\spycrush\uninst.exe
%APPDATA%\Microsoft\Internet Explorer\quick launch\spycrush ?.*.lnk
%DESKTOP%\spycrush.lnk
%TEMP%\crush.db
%START_PROGRAMS%\spycrush\spycrush ?.? website.lnk
%START_PROGRAMS%\spycrush\spycrush ?.*.lnk
%START_PROGRAMS%\spycrush\uninstall spycrush ?.*.lnk
%START_MENU%\spycrush ?.*.lnk
- Files by MD5
MD5: A6DE1AAF89478ED015667647393DBDC1 Size: 3402414
MD5: 89189B9F812337844EA463909F32489A Size: 1757184
- Files by Directories
%ProgramFiles%\spycrush
%START_PROGRAMS%\spycrush
- Files by CLSID or Name
CLSID=3820350f-5092-2add-8a4c-8de2c609fae5
- Registry Keys
HKCR\interface\{189518df-7eba-4d31-a7e1-73b5bb60e8d5}
HKCR\interface\{23d627fe-3f02-44cf-9ee1-7b9e44bd9e13}
HKCR\interface\{43cfefbe-8ae4-400e-bbe4-a2b61bb140fb}
HKCR\interface\{5790b963-23c5-43c1-bcf5-01c9b5a3e44e}
HKCR\interface\{5d42ddf4-81eb-4668-9951-819a1d5befc8}
HKCR\interface\{76d06077-d5d3-40ca-b32d-6a67a7ff3f06}
HKCR\interface\{86c7e6c3-ec47-44e5-aa08-ee0d0a25895f}
HKCR\interface\{9283dac1-43f5-4580-bf86-841f22af2335}
HKCR\interface\{ae90cafc-09d4-47f0-9e11-ce621c424f08}
HKCR\interface\{ba397e39-f67f-423f-bc6e-65939450093a}
HKCR\interface\{bec8a83d-01d4-4f15-b8a9-4b4ab24253a7}
HKCR\interface\{c4eedc19-992d-409a-b323-ed57d511afa5}
HKCR\interface\{dd90f677-d205-4f70-9014-659614aabcb2}
HKCR\interface\{e3df91f3-f24f-441e-9001-d61f36024322}
HKCR\interface\{f459eadb-5903-48d5-864c-2b7b46ab1424}
HKCR\interface\{fc4edf66-0547-4f1a-ae96-7cfcad711c90}
HKCR\typelib\{661173ee-fa31-4769-97d4-b556b5d09bda}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\app paths\spycrush.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\uninstall\spycrush
HKLM\software\spycrush
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\run ValueName=spycrush
«
Go to Software Database
