It is in the dll cache and the system file restore folders that Window File Protection has so that needs to be turned off before you go deleting dll's. My nieces computer had it and it was a bear but I got it. there are some nasty numbered files if I remember right that you need to get also. This worked for me after I turned off windows file protection. Note: This manual removal process is difficult and you run the risk of destroying your computer.
Remove SpyQuake processes: spywarequakeinstaller.exe spywarequake.exe uninst.exe dfrgsrv.exe mssearchnet.exe nvctrl.exe Remove SpyQuake registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareQuak e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D 661173EE-FA31-4769-97D4-B556B5D09BDA 4DA4616D-7E6E-4FD9-A2D5-B6C535733E22 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spywa reQuake CurrentVersion\AppPaths\SpywareQuake.exe\:"%programfiles%\SpywareQuake\Spywa reQuake.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Run\SpywareQuake:"%programfiles%\SpywareQuake\SpywareQuake.ex e/h" CurrentVersion\Uninstall\SpywareQuake\DisplayName:"SpywareQuake2.0" CurrentVersion\Uninstall\SpywareQuake\UninstallString:"%programfiles%\Spywar eQuake\uninst.exe" CurrentVersion\Uninstall\SpywareQuake\DisplayIcon:"%programfiles%\SpywareQua ke\SpywareQuake.exe" CurrentVersion\Uninstall\SpywareQuake\DisplayVersion:"2.0" CurrentVersion\Uninstall\SpywareQuake\NSIS:StartMenuDir:"SpywareQuake" CurrentVersion\Uninstall\SpywareQuake\URLInfoAbout:"http://www.spywarequake. com" CurrentVersion\Uninstall\SpywareQuake\Publisher:"SpywareQuake.com" HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\refid:"1" HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\Language:"1033" Unregister SpyQuake DLL files: ywbicim.dll wfkduei.dll hvnwm.dll imfdfcj.dll yhbdupd.dll stickrep.dll sivudro.dll xenadot.dll dvdcap.dll suprox.dll msvcp71.dll msvcr71.dll Detect and Delete these SpyQuake files: spywarequakeinstaller.exe spywarequake.exe uninst.exe ywbicim.dll wfkduei.dll hvnwm.dll imfdfcj.dll yhbdupd.dll stickrep.dll sivudro.dll xenadot.dll dvdcap.dll suprox.dll msvcp71.dll msvcr71.dll dfrgsrv.exe mssearchnet.exe nvctrl.exe spywarequake2.0website.lnk spywarequake2.0.lnk uninstallspywarequake2.0.lnk blacklist.txt ref.dat spywarequake.url sq.ini english.ini hp[X].tmp ld[X].tmp Mark Dodge [EMAIL PROTECTED] EarthLink Revolves Around You. > [Original Message] > From: FORC5 <[EMAIL PROTECTED]> > To: <[email protected]> > Date: 7/18/2006 10:14:12 AM > Subject: [H] spyquake2 help > > have a customer laptop in with spyquake2, uninstalled the program but still have the tray pop up. Found a program to clean it called roguescanfix, but I am leery of it and was wondering if anyone has used it. ?????? > > so far spy sweeper and adware have not got it . The pop up is a fake one claiming infection to persuade u to buy the full product. Very bad stuff. Two AV scans with mcafee and NAV only found a couple of V's. so far have removed 129 spy traces ( not including cookies ) > > haven't tried MS defender yet. I think I know which .dll's are the culprit, may just delete them and see wtf. > > thanks > fp > > -- > Tallyho ! ]:8) > Taglines below ! > -- > Legal marijuana needs true glaucoma patients.
