SpywareQuake

Description: Adware
Risk Level: High
Date of First Occurence: Monday, April 21, 2008
Software Developer: (unknown)
Brief Info: SpywareQuake is an adware that issue fake warnings on your computer that it is infected with spyware and will convinced the user to purchased the full version.
Removal: This threat can be removed using "Spyware Terminator"

REMOVER SPYWARE »

Geographical Distribution of Threat "SpywareQuake"

Threat Info

View All

Detected Items

  1. Detected Files: %SYSDIR%\XTE.dll MD5: E0BA1941641F397B5E8BF496F177093E Size:272144 MD5: D2B15555E63AB87EBAD4B662C2A501C9 Size:181632 %SYSDIR%\winccf32.dll MD5: D522663D16F81B3FCE6716F6AE58673A Size:32768 MD5: 660F17720F49D2D2FD6C70CC5A1F0FC5 Size:32256 MD5: 3E1FFB1B3FDC23D88B48784DF66577F5 Size:32768 MD5: BABF5C035C78681EEB6BBE54D946750B Size:33792 MD5: 9BFAD487AA30D913271F994897D5B103 Size:32768 MD5: 31C77C334DE5A4E998EA5713BC95245D Size:33792 MD5: 2876768A762153AFE50C28D9E70590AA Size:33280 MD5: 6798C02A639903BF155281668B3D2D0D Size:32768 MD5: 8D5EEB7AAB9ABDE469921E22F28DB633 Size:33280 MD5: DADF1DAACD415478FA0C24CE7ED4E7D2 Size:33280 MD5: 8BE74A81488305CF380139AB8570916F Size:33792 MD5: B5FC830E758005D2960A81D1A42A6FFB Size:32256 and more.... %PROGRAMFILES%\SPYWAREQUAKE.COM\SPYWARE-QUAKE.EXE MD5: 95134679CA8B529B61E5C5E0515D577F Size:1626112 %SYSDIR%\issearch.exe MD5: 445EA86F754622EBB73A206B45628F3C Size:33280 MD5: 4A1BF30F4A688FE1706D6971EA8D0B11 Size:35840 %SYSDIR%\ishost.exe MD5: 6C57FD1A5DD50C1D1C115352E140C40D Size:35868 MD5: 524DFB2665542EE63A5D48F4272CC46A Size:55312 MD5: 617ED646FCAF69C03B00EB6DB8774CBF Size:36892 %PROGRAMFILES%\SpywareQuake\SpywareQuake.exe MD5: 4531574D0DAC21BCB1B62776AF4DC597 Size:1617920 %SYSDIR%\ISNOTIFY.EXE MD5: 9C1B75FD11BEBE5DBD77C4FD22E7A614 Size:9035 %WINDIR%\temp\sa17.exe MD5: 15007A267270A6AA67B68DEA58B719F0 Size:2620442 MD5: 2A7B18439A5F705CFBACB2DE2333111A Size:552960 %SYSDIR%\IMFDFCJ.DLL MD5: 1A374E5F714B39BAFC9668C680161AD9 Size:176128 %SYSDIR%\xtu.dll MD5: 19382A080B9E2394883703A5B3E015BE Size:131072 %SYSDIR%\winccf32.dll MD5: 60D7727C5858DEA8C3095AD6343C7885 Size:26624 MD5: 8AFBAE00487C9821BE6AC0B717198C11 Size:24064 MD5: 40661941B0665B3782E2EC7D1D1D4085 Size:28160
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %ProgramFiles%\SpywareQuake\SpywareQuake.exe %sysdir%\suprox.dll %sysdir%\SIVUDRO.DLL %sysdir%\windav32.dll %windir%\windav32.dll %sysdir%\wininnet.dll %windir%\wininnet.dll %sysdir%\ishost.exe %sysdir%\issearch.exe %sysdir%\xt?.dll %APPDATA%\MICROSOFT\HTML HELP.DLL %sysdir%\winccf32.dll %sysdir%\ISNOTIFY.EXE %sysdir%\ismont.exe %windir%\temp\sa17.exe %sysdir%\xenadot.dll %sysdir%\WFKDUEI.DLL %sysdir%\IMFDFCJ.DLL %ProgramFiles%\SPYWAREQUAKE.COM\SPYWARE-QUAKE.EXE %sysdir%\hzclqhc.dll
  2. Files by MD5 MD5: 4531574D0DAC21BCB1B62776AF4DC597 Size: 1617920 MD5: C2C5124A1984B509922E47E811106982 Size: 176128 MD5: B8981BBB39012F5CC21A920DF21B0E5F Size: 176128
  3. Files by CLSID or Name CLSID=8dc1f789-e073-4363-b40d-07376bc5ecc5

« Go to Software Database