SpyCrush Descriptions:
SpyCrush (v. 3.3) also known as SpyCrusher, SpyCrush 3.2 or SpyCrush 3.3, is a counterfeit anti-spyware software that give exaggerated reports on your computer. 
It’s believed SpyCrush is a variant of SpyLocked that caused a lot of problems in the past few months. SpyCrush usually installed itself onto your PC without your permission and attention, through Trojan, Virus or fake software. SpyCrush will display fake system alerts or fake security alerts to trick user to buy the Paid Version of SpyCrush.
To avoid putting your computer at risk, it is important to remove SpyCrush thoroughly. You can try our recommended SpyHunter* Spyware Detection Utility, which is very easy and straight-forward. You don’t need to know anything about SpyCrush. However, if you understand registry and dll files in Windows, we strongly recommend you to try the SpyCrush removal instructions that we put together. It’s been proven that it can essentially get rid of SpyCrush from your machine.
We will constantly update the instructions to combat against SpyCrush and its variants. Please feel free to post comments if you have any questions or suggestions regarding SpyCrush. This is a great community and I am sure that you would find the answers. Good luck!
Manual Removal Instructions:
Stop SpyCrush Processes:
(Learn how to do this)
spycrush.exe
SpyCrush 3.1.exe
SpyCrush 3.2.exe
SpyCrush 3.3.exe
Remove SpyCrush Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \Run\spycrush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \App Paths\spycrush.exe
HKEY_CLASSES_ROOT\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\SpyCrush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \Uninstall\SpyCrush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \ShellServiceObjectDelayLoad\{6076D2B1-634C-4685-843B-F826045EA5DC}
Unregister SpyCrush DLL Files:
(Learn how to do this)
syycum.dll
ckimzeb.dll
gsrnxgh.dll
yesgnhr.dll
iauoi.dll
gbjkog.dll
xikor.dll
tczij.dll
igpfced.dll
iwwvh.dll (new)
xedasn.dll (new)
Find and Delete these SpyCrush Files:
(Learn how to do this)
syycum.dll
spycrush.exe
SpyCrush 3.1.exe
ckimzeb.dll
SpyCrush 3.2.exe
gsrnxgh.dll
yesgnhr.dll
iauoi.dll
gbjkog.dll
xikor.dll
tczij.dll
SpyCrush 3.3.exe (new)
igpfced.dll (new)
iwwvh.dll (new)
xedasn.dll (new)
Get the SpyHunter* Spyware Detection Utility.
Brian-
You suggested using System Restore thru Windows Vista.
I am using Windows XP, do you think this would help?
I know it’s a stupid question and I’ve used restore before, but didn’t realize it would help with something like this.
In the meanwhile awaiting your response I’ll give it a try and let you know the result…….
Hi Folks!
I have been messing with spycrush for two days now and this blog is wonderful. Spycrush has many different .dll files that are usually placed in the windows/system32 directory(XP). Spycrush allowed me to believe that I had unistalled the program, but it left the igpfced.dll file behind. I ran spybot search and destroy which removed the X ? icon, but 24 hours later it was back. This programs mutates in some way which I am looking into now. Great blog, I am telling all i know to watch this place bc there are some good folks here!
The file ckimzeb.dll stays active and is difficult to remove even in safe mode. I booted into safe mode (f8)and it was still loading the notifications. I then rebooted in safe mode command prompt and went to windows/system32 and deleted the file in dos.
Thank you everybody for the great tips to get rid of Spycrush. Spysweeper got rid of the virus (Norton IS USELESS), the programs, and the trojans but I was still left with the flashing X/? icon that went to spycrush’s webpage. That icon is one of the .dll listed above. The way I removed it was going to the search option in the startup menu. Search all files and folders for .dll. Sort alphabetically NOT by time/date because I found the date changes and is not the time it was downloaded. Try all the .dlls listed above, it will be one or more of them. It may not let you delete it so you will have to rename it (I did this in safe mode). Once I did that I still couldn’t delete it but the icon changed, restarted in normal mode and the icon was gone. Then I was able to delete the renamed .dll icon.
I finally got rid of the crap spy crush file(igpfced.dll) from my pc.Click start then search,go to all files and folders.Type in igpfced.dll(or whatever .dll you want to remove) and click search.When file is found click the “move to” icon.Create new folder then delete it.Make sure to delete it from recycle bin as well.Hope this helps someone!
PPL!!! This is not normal I don’t have any process of spycrush or files that they tell and I still have stupid pop-up baloon of SpyCrush!!!! WHat to do?
and this one too…
jrwdvvl.dll
I can’t seem to shake this one – remove it from registry, but it just comes back! something else is powering this damn thing – but I’m gonna find it and kill it slowly and painfully by chopping it in pieces in notepad!!!
Ahhh!!! do a seach for files modified on the date of your virus attack – i.e. the date on the .dll file you find… then sort by date – hmm – you reckon all these files with the same date and time are your virus’s mates?
I do! – and look – one of them is an “exclude” file for spybot S&D – which is probably why your popular anti-spyware problem can’t seem to find it.
Suspicious files: a.exe, vm5_killer.exe ??
I’ve been reading some of these posts and them very helpful. I have worked for 26 days off and on to clean up our system and the only thing I had left was the red circle/blue question mark on the task bar. I installed Windows Defender {free} and it took care of it. I then started on my son’s laptop with the same problems. Installed Windows Defender and it cleaned right up. Had to delete a couple of files in programs and that was it. Highly recommend you guys try Windows Defender, it really works. Mark
go to start menu….
click help and support….
click Undo changes to your computer with System Restore
click restore my computer to an earlier time
pick a date you know you never had the virus and let it run…
worked a treat for me..
oh yes i beat it!!!!