Spycrush Adware

Virus description: Spycrush
Category:Adware,Ransomware

Spycrush Detection :

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.1.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.2.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.3.lnk
[%DESKTOP%]\SpyCrush 3.2.lnk
[%PROGRAM_FILES%]\SC\SpyCrush 3.3\SpyCrush 3.3.exe
[%PROGRAM_FILES%]\SpyCrush 3.2\SpyCrush 3.2.exe
[%STARTMENU%]\SpyCrush 3.1.lnk
[%STARTMENU%]\SpyCrush 3.2.lnk
[%STARTMENU%]\SpyCrush 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\quick launch\spycrush 5.1.lnk
[%DESKTOP%]\SpyCrush 3.3.lnk
[%DESKTOP%]\spycrush.lnk
[%PROFILE%]\start menu\SpyCrush 3.3.lnk
[%PROFILE_TEMP%]\crush.db
[%PROGRAMS%]\SpyCrush 3.3\SpyCrush 3.3 Website.lnk
[%PROGRAMS%]\SpyCrush 3.3\SpyCrush 3.3.lnk
[%PROGRAMS%]\SpyCrush 3.3\Uninstall SpyCrush 3.3.lnk
[%STARTMENU%]\spycrush 5.1.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.1.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.2.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.3.lnk
[%DESKTOP%]\SpyCrush 3.2.lnk
[%PROGRAM_FILES%]\SC\SpyCrush 3.3\SpyCrush 3.3.exe
[%PROGRAM_FILES%]\SpyCrush 3.2\SpyCrush 3.2.exe
[%STARTMENU%]\SpyCrush 3.1.lnk
[%STARTMENU%]\SpyCrush 3.2.lnk
[%STARTMENU%]\SpyCrush 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\quick launch\spycrush 5.1.lnk
[%DESKTOP%]\SpyCrush 3.3.lnk
[%DESKTOP%]\spycrush.lnk
[%PROFILE%]\start menu\SpyCrush 3.3.lnk
[%PROFILE_TEMP%]\crush.db
[%PROGRAMS%]\SpyCrush 3.3\SpyCrush 3.3 Website.lnk
[%PROGRAMS%]\SpyCrush 3.3\SpyCrush 3.3.lnk
[%PROGRAMS%]\SpyCrush 3.3\Uninstall SpyCrush 3.3.lnk
[%STARTMENU%]\spycrush 5.1.lnk

Folders:
[%PROGRAMS%]\SpyCrush
[%COMMON_PROGRAMS%]\SpyCrush
[%PROGRAMS%]\SpyCrush 3.2
[%PROGRAM_FILES%]\SC\SpyCrush 3.3
[%PROGRAM_FILES%]\SpyCrush 3.1
[%PROGRAM_FILES%]\SpyCrush 3.2
[%PROGRAMS%]\spycrush
[%PROGRAM_FILES%]\spycrush

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{3820350F-5092-2ADD-8A4C-8DE2C609FAE5}
HKEY_CLASSES_ROOT\CLSID\{6f396a67-f473-48c9-9950-636ce17e584e}
HKEY_CLASSES_ROOT\CLSID\{DF4E7A0C-E233-4906-B4C1-A404356541FF}
HKEY_CLASSES_ROOT\Interface\{01B509DF-7211-4AEF-AF91-5B2185D84C3C}
HKEY_CLASSES_ROOT\Interface\{03C2E255-E86D-44A8-995F-51A8235D9681}
HKEY_CLASSES_ROOT\Interface\{077B1BF5-5C71-4167-ADCE-5AFD86E00FF5}
HKEY_CLASSES_ROOT\Interface\{0890C1D6-DEBD-4CBC-97CD-DFAFB8D06654}
HKEY_CLASSES_ROOT\Interface\{0E863328-916D-4032-A57D-B4D234830AE8}
HKEY_CLASSES_ROOT\Interface\{0EF44C21-275E-4614-8564-8C46097A03D9}
HKEY_CLASSES_ROOT\Interface\{17D6C6AB-E681-4D19-8363-6CE45105B41E}
HKEY_CLASSES_ROOT\Interface\{189518DF-7EBA-4D31-A7E1-73B5BB60E8D5}
HKEY_CLASSES_ROOT\Interface\{23D627FE-3F02-44CF-9EE1-7B9E44BD9E13}
HKEY_CLASSES_ROOT\Interface\{25FC01E9-92AC-443F-8496-7E44E0DD04AB}
HKEY_CLASSES_ROOT\Interface\{2B491308-39EE-4A1E-8020-D4EF364149F8}
HKEY_CLASSES_ROOT\Interface\{2CAFAFE4-E098-458F-BCCE-0D8F873C38FC}
HKEY_CLASSES_ROOT\Interface\{2CF3105F-E9AD-4BC2-860B-09DB079D498E}
HKEY_CLASSES_ROOT\Interface\{344B79D5-D3DB-469B-A31E-AACA1D75B105}
HKEY_CLASSES_ROOT\Interface\{43CFEFBE-8AE4-400E-BBE4-A2B61BB140FB}
HKEY_CLASSES_ROOT\Interface\{533F1895-9E5F-4722-97D7-4621633A9721}
HKEY_CLASSES_ROOT\Interface\{5790B963-23C5-43C1-BCF5-01C9B5A3E44E}
HKEY_CLASSES_ROOT\Interface\{5D42DDF4-81EB-4668-9951-819A1D5BEFC8}
HKEY_CLASSES_ROOT\Interface\{5DBD9711-CEAF-4C20-9CE2-B17167271C24}
HKEY_CLASSES_ROOT\Interface\{667C305A-10F1-4591-9652-966B41BEE5A1}
HKEY_CLASSES_ROOT\Interface\{66EB826C-4A16-40D4-9418-F3D4E319722B}
HKEY_CLASSES_ROOT\Interface\{67917213-04FB-46AE-ABFB-95CFCDDAF7DF}
HKEY_CLASSES_ROOT\Interface\{6E11808E-4C2D-4BC6-9815-C86E87CC2923}
HKEY_CLASSES_ROOT\Interface\{7277172E-E708-4168-99F0-DF09FDDF0BE0}
HKEY_CLASSES_ROOT\Interface\{76D06077-D5D3-40CA-B32D-6A67A7FF3F06}
HKEY_CLASSES_ROOT\Interface\{7E5BB405-74BC-42EF-B693-FF004D0AF1FB}
HKEY_CLASSES_ROOT\Interface\{803BD939-D225-4B05-85F8-CF5EE87D16FE}
HKEY_CLASSES_ROOT\Interface\{86C7E6C3-EC47-44E5-AA08-EE0D0A25895F}
HKEY_CLASSES_ROOT\Interface\{87032659-2467-431F-8558-35A2CB66F7C7}
HKEY_CLASSES_ROOT\Interface\{9283DAC1-43F5-4580-BF86-841F22AF2335}
HKEY_CLASSES_ROOT\Interface\{96D36795-387D-4504-A42E-A2DC60684F9D}
HKEY_CLASSES_ROOT\Interface\{A30A1054-61A4-411E-8E6B-E7EED2917409}
HKEY_CLASSES_ROOT\Interface\{A9E40D6A-D26E-4413-9431-832E42C51C3C}
HKEY_CLASSES_ROOT\Interface\{A9E61BA4-EB7D-4699-8742-2BCFC842CD26}
HKEY_CLASSES_ROOT\Interface\{AA4A709C-25B9-4BA5-95AD-3185FEBD9A7F}
HKEY_CLASSES_ROOT\Interface\{AE90CAFC-09D4-47F0-9E11-CE621C424F08}
HKEY_CLASSES_ROOT\Interface\{AED159D6-86C6-489C-A2B2-74B3E94E7744}
HKEY_CLASSES_ROOT\Interface\{AF64B18F-C7B6-4FCE-A4E6-4248344A196F}
HKEY_CLASSES_ROOT\Interface\{B3E0E19A-FA96-4BBE-B429-CA4C9D8EC0A9}
HKEY_CLASSES_ROOT\Interface\{B6B02D11-4824-45EF-A8D4-5AD2AFB02264}
HKEY_CLASSES_ROOT\Interface\{B9211B3D-5FC6-4311-998E-B4138C256532}
HKEY_CLASSES_ROOT\Interface\{B9ED75EE-7AFC-482C-8206-944B46221041}
HKEY_CLASSES_ROOT\Interface\{BA1A7BC8-AF6E-4638-AAC9-669C703B8783}
HKEY_CLASSES_ROOT\Interface\{BA397E39-F67F-423F-BC6E-65939450093A}
HKEY_CLASSES_ROOT\Interface\{BEC8A83D-01D4-4F15-B8A9-4B4AB24253A7}
HKEY_CLASSES_ROOT\Interface\{C2F4EDE7-06F0-4CA7-983B-93BF8FC1585D}
HKEY_CLASSES_ROOT\Interface\{C34B689D-78D9-436B-86A1-717CC7172B67}
HKEY_CLASSES_ROOT\Interface\{C4EEDC19-992D-409A-B323-ED57D511AFA5}
HKEY_CLASSES_ROOT\Interface\{C7896120-C477-420B-AFDE-E588DE822B58}
HKEY_CLASSES_ROOT\Interface\{C8CFBDBF-0072-4C49-8885-6BF47B65ADE3}
HKEY_CLASSES_ROOT\Interface\{CAAC1FBA-7BBE-4890-8156-D203FEA81D96}
HKEY_CLASSES_ROOT\Interface\{CF06FDA2-9F4E-4C12-B7E2-4368159BC178}
HKEY_CLASSES_ROOT\Interface\{CF1B8DD1-0374-4E99-8A63-DE041F80F5B4}
HKEY_CLASSES_ROOT\Interface\{D1EE4F9E-7ED5-4838-AD46-57A393D09E91}
HKEY_CLASSES_ROOT\Interface\{D788C427-3125-4EE6-B6DA-8FDB4FEB7692}
HKEY_CLASSES_ROOT\Interface\{DD90F677-D205-4F70-9014-659614AABCB2}
HKEY_CLASSES_ROOT\Interface\{DDF9E478-7A9E-4A29-AE51-FC0C12072AE7}
HKEY_CLASSES_ROOT\Interface\{E3DF91F3-F24F-441E-9001-D61F36024322}
HKEY_CLASSES_ROOT\Interface\{EC4DB87A-A091-4A6D-B14F-69856A033C99}
HKEY_CLASSES_ROOT\Interface\{F422CDAC-A717-4A09-BB5C-89F36227B465}
HKEY_CLASSES_ROOT\Interface\{F459EADB-5903-48D5-864C-2B7B46AB1424}
HKEY_CLASSES_ROOT\Interface\{FB891917-2617-4660-8015-49A79AC80ACD}
HKEY_CLASSES_ROOT\Interface\{FC4EDF66-0547-4F1A-AE96-7CFCAD711C90}
HKEY_CLASSES_ROOT\Interface\{FEC3BC5A-60C0-414C-8FD4-5C967597C25D}
HKEY_CLASSES_ROOT\TypeLib\{3A57F88E-E4E8-470C-B032-6162923681D5}
HKEY_CLASSES_ROOT\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_CLASSES_ROOT\TypeLib\{6EED0372-5666-464F-8D88-2526FFBBED55}
HKEY_CLASSES_ROOT\TypeLib\{D72322BB-82BF-4C23-B834-90EA8A099FC1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3820350F-5092-2ADD-8A4C-8DE2C609FAE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6f396a67-f473-48c9-9950-636ce17e584e}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF4E7A0C-E233-4906-B4C1-A404356541FF}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{01B509DF-7211-4AEF-AF91-5B2185D84C3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03C2E255-E86D-44A8-995F-51A8235D9681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{17D6C6AB-E681-4D19-8363-6CE45105B41E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{189518DF-7EBA-4D31-A7E1-73B5BB60E8D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23D627FE-3F02-44CF-9EE1-7B9E44BD9E13}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{43CFEFBE-8AE4-400E-BBE4-A2B61BB140FB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{533F1895-9E5F-4722-97D7-4621633A9721}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5790B963-23C5-43C1-BCF5-01C9B5A3E44E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D42DDF4-81EB-4668-9951-819A1D5BEFC8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6E11808E-4C2D-4BC6-9815-C86E87CC2923}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D06077-D5D3-40CA-B32D-6A67A7FF3F06}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7E5BB405-74BC-42EF-B693-FF004D0AF1FB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{86C7E6C3-EC47-44E5-AA08-EE0D0A25895F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9283DAC1-43F5-4580-BF86-841F22AF2335}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE90CAFC-09D4-47F0-9E11-CE621C424F08}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AED159D6-86C6-489C-A2B2-74B3E94E7744}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B6B02D11-4824-45EF-A8D4-5AD2AFB02264}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B9ED75EE-7AFC-482C-8206-944B46221041}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA1A7BC8-AF6E-4638-AAC9-669C703B8783}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA397E39-F67F-423F-BC6E-65939450093A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BEC8A83D-01D4-4F15-B8A9-4B4AB24253A7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C2F4EDE7-06F0-4CA7-983B-93BF8FC1585D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C4EEDC19-992D-409A-B323-ED57D511AFA5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C7896120-C477-420B-AFDE-E588DE822B58}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C8CFBDBF-0072-4C49-8885-6BF47B65ADE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD90F677-D205-4F70-9014-659614AABCB2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DDF9E478-7A9E-4A29-AE51-FC0C12072AE7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3DF91F3-F24F-441E-9001-D61F36024322}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F422CDAC-A717-4A09-BB5C-89F36227B465}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F459EADB-5903-48D5-864C-2B7B46AB1424}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FB891917-2617-4660-8015-49A79AC80ACD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FC4EDF66-0547-4F1A-AE96-7CFCAD711C90}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EED0372-5666-464F-8D88-2526FFBBED55}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SpyCrush 3.2.exe 3.2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SpyCrush 3.3.exe 3.3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyCrush 3.2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyCrush 3.3
HKEY_LOCAL_MACHINE\SOFTWARE\SpyCrush 3.2
HKEY_LOCAL_MACHINE\SOFTWARE\SpyCrush 3.3
HKEY_CLASSES_ROOT\clsid\{3820350f-5092-2add-8a4c-8de2c609fae5}
HKEY_CLASSES_ROOT\typelib\{d72322bb-82bf-4c23-b834-90ea8a099fc1}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spycrush.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spycrush
HKEY_LOCAL_MACHINE\software\spycrush

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CLASSES_ROOT\interface\{0890c1d6-debd-4cbc-97cd-dfafb8d06654}\typelib
HKEY_CLASSES_ROOT\interface\{0e863328-916d-4032-a57d-b4d234830ae8}\typelib
HKEY_CLASSES_ROOT\interface\{0ef44c21-275e-4614-8564-8c46097a03d9}\typelib
HKEY_CLASSES_ROOT\interface\{25fc01e9-92ac-443f-8496-7e44e0dd04ab}\typelib
HKEY_CLASSES_ROOT\interface\{2b491308-39ee-4a1e-8020-d4ef364149f8}\typelib
HKEY_CLASSES_ROOT\interface\{2cf3105f-e9ad-4bc2-860b-09db079d498e}\typelib
HKEY_CLASSES_ROOT\interface\{344b79d5-d3db-469b-a31e-aaca1d75b105}\typelib
HKEY_CLASSES_ROOT\interface\{5dbd9711-ceaf-4c20-9ce2-b17167271c24}\typelib
HKEY_CLASSES_ROOT\interface\{803bd939-d225-4b05-85f8-cf5ee87d16fe}\typelib
HKEY_CLASSES_ROOT\interface\{87032659-2467-431f-8558-35a2cb66f7c7}\typelib
HKEY_CLASSES_ROOT\interface\{96d36795-387d-4504-a42e-a2dc60684f9d}\typelib
HKEY_CLASSES_ROOT\interface\{cf06fda2-9f4e-4c12-b7e2-4368159bc178}\typelib
HKEY_CLASSES_ROOT\interface\{cf1b8dd1-0374-4e99-8a63-de041f80f5b4}\typelib
HKEY_CLASSES_ROOT\interface\{d1ee4f9e-7ed5-4838-ad46-57a393d09e91}\typelib
HKEY_CLASSES_ROOT\interface\{d788c427-3125-4ee6-b6da-8fdb4feb7692}\typelib
HKEY_CLASSES_ROOT\interface\{ec4db87a-a091-4a6d-b14f-69856a033c99}\typelib

Removing Spycrush:

you can run trial version of ExterminateIt, or remove Spycrush manually..


ExterminateIt effectively and automatically removes Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware) from you computer.

Download ExterminateIt! to instantly get rid of Spycrush!


Also Be Aware of the Following Threats:
QDel87 Trojan Symptoms
Remove Depees!generic Trojan
Readfile.Cab Hostile Code Removal
Pigeon.ENZ Trojan Cleaner