Saturday, March 25, 2006

SpywareQuake is Newest SpyAxe Clone

Been looking around and I am seeing a new probable variant of SpyAxe, SpywareStrike, and SpyFalcon. Newest name is SpywareQuake. You may see the following line from Hijackthis:


O4 - HKLM\..\Run: [SpywareQuake] C:\Program Files\SpywareQuake\SpywareQuake.exe /h


You may also find this file as a new dll controlling the fake warning near the clock:


C:\WINDOWS\system32\stickrep.dll


You can follow the SpyFalcon removal instructions and add the above to the fix as needed

0 comments:

Sitemeter