SpywareRemove Blog » Spy Quake Removal http://www.spywareremove.com/security Just another WordPress weblog Tue, 16 Mar 2010 19:49:51 +0000 http://wordpress.org/?v=2.8.4 en hourly 1 Spy Quake Variants – ywbicim.dll and wfkduei.dll http://www.spywareremove.com/security/spy-quake-variants-ywbicimdll-and-wfkdueidll/ http://www.spywareremove.com/security/spy-quake-variants-ywbicimdll-and-wfkdueidll/#comments Mon, 29 May 2006 17:22:40 +0000 ghostrider01 http://dev.spywareremove.com/blog/?p=123 Spy Quake, a rogue antispyware application, continues to release new malware variants.

Spy Quake may install without your consent, hijack your desktop and pop up fake warnings from the system tray stating that the machine is infected with spyware. To learn more on how to remove Spy Quake, go to Spy Quake manual removal instructions.

Remove New Spy Quake Variants
Delete the following Spy Quake files from your registry keys or use this removal tool to automatically check for Spy Quake variants.

For C:WindowsSystem32ywbicim.dll:

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorer
SharedTaskScheduler]
“{6c69e319-0d03-47da-997a-36586cbc53b3}”=”fortread”

[HKEY_CURRENT_USERSoftwareClassesCLSID
{6c69e319-0d03-47da-997a-36586cbc53b3}InProcServer32]
@=”C:\WINDOWS\system32\ywbicim.dll”

For C:WindowsSystem32wfkduei.dll:

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorer
SharedTaskScheduler]
“{0c7416f0-dd23-420f-97f5-aae352ea2bf1}”=”glochid”

[HKEY_CURRENT_USERSoftwareClassesCLSID
{0c7416f0-dd23-420f-97f5-aae352ea2bf1}InProcServer32]
@=”C:\WINDOWS\system32\wfkduei.dll”

**Note: SpyHunter’s free version is for spyware detection only. To remove spyware, you have the option of buying the full version.

]]> http://www.spywareremove.com/security/spy-quake-variants-ywbicimdll-and-wfkdueidll/feed/ 0