## Thursday, April 06, 2006

### SpywareQuake Removal

SpywareQuake is the new version of SpyAxe, SpywareStrike, and SpyFalcon. You may see the following line from Hijackthis:

O4 - HKLM\..\Run: [SpywareQuake] C:\Program Files\SpywareQuake\SpywareQuake.exe /h

You may also find one of these file as a new dll controlling the fake warning near the clock:

C:\WINDOWS\system32\stickrep.dll
C:\WINDOWS\system32\dxmpp.dll
C:\WINDOWS\system32\ginuerep.dll
C:\WINDOWS\system32\dfrgsrv.exe

You can follow the SpyFalcon removal instructions and add the above to the fix as needed.