How can I remove the trojan spycrush?

Hi,

I’ve done some research for you.

SpyCrush is a corrupt anti-spyware program illegally installed to user computers by widely spread trojans and through exploits. This application is not only a weak spy ware remover, but also a clone of the infamous rogues.

MANUAL REMOVAL OF THE SPYCRUSH TROJAN

1. Download Pocket KillBox or KillBox utility.

2. Download the SmitFraudFix tool and unpack its files to a chosen folder.

3. Download the HijackThis program. Run a system scan, then fix the following entries (if present):

O4 – HKLM..\Run: [SpyCrush] C:\Program Files\SpyCrush\spycrush.exe O4 – HKLM..\Run: [SpyCrush 3.1] C:\Program Files\SpyCrush 3.1\spycrush 3.1.exe O4 – HKLM..\Run: [SpyCrush 3.2] C:\Program Files\SpyCrush 3.2\spycrush 3.2.exe O21 – SSODL: hemadynanometr – {6076d2b1-634c-4685-843b-f826045ea5dc} – %System%\syycum.dll O22 – SharedTaskScheduler: damkjernite - {5bf53d50-b1ec-47b6-a00a-0bd32baeb7ef} – %System%\ckimzeb.dll O22 – SharedTaskScheduler: debugs – {c704547b-26c0-4222-a034-81653c07b494} – %System%\gsrnxgh.dll O22 – SharedTaskScheduler: hellenophile - {6F396A67-F473-48C9-9950-636CE17E584E} – %System%\yesgnhr.dll

%System% is your default system directory, which usually is C:\WINDOWS\System for Windows 98 and Windows Me, C:\WINDOWS\System32 for Windows XP, and C:\WINNT\System32 for Windows 2000.

4. Now restart your system in Safe Mode. This step is very important! Please note that you need to have the administrator’s privileges.

5. Once in Safe Mode, run the SmitFraudFix tool by executing the smitfraudfix.cmd file. The official SmitFraudFix tutorial can be found here.

6. Then use either Pocket KillBox or KillBox to delete all the files from the list above present in your system.

Malicious files in C:\WINDOWS\System32 or C:\WINNT\System32: gbjkog.dll iauoi.dll

Good luck!