SpySheriff manual removal:
Kill processes:
spysheriff.exe, winstall.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SNInstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpySheriff
HKEY_CLASSES_ROOT\CLSID\{202B0EFD-2CB9-039B-2B11-A3579D6D56A3}
HKEY_CLASSES_ROOT\CLSID\{7C43E35C-A398-7C5F-B1BA-7E87073BE150}
HKEY_CLASSES_ROOT\CLSID\{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E}
HKEY_CURRENT_USER\Software\SpySheriff
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\SpySheriff
Delete files:spysheriff.exe, winstall.exe, heur000.dll, heur001.dll, heur002.dll, heur003.dll, iesecurity.dll, procmon.dll, uninstall.exe, desktop.html, wallpaper.html
Delete directories:C:\Program Files\SpySheriff
C:\Documents and Settings\[Current User]\Start Menu\Programs\SpySheriff
Delete all the files inside C:\Windows\Prefetch or C:\Winnt\Prefetch.
Post Comment:
Attention: Use this form only if you have additional information about SpySheriff parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Guest. 2007-11-17 20:11:56
guangzhou fair ,so some information is not detailed afther next week i will go back
and will contact with you !
best rgs
grace
i wish i was a spykids
you don't know me because i am not english people i am thai people
my name is phleung noppawan satnawet
you can call me phleung
i went to be a spy
I was doing a casual search for spyware programs and was stunned to see all the warnings about spy sheriff.
I have been using Spy Sheriff for over a year and have to say that i have never had problems with the program (I thought) My system runs smoothly and Spy Sheriff has always kept spyware off my computer. NOW I AM WORIED! Reading others experiences and removal problems I decided to uninstall it, which I did very easily. It never effected my desktop settings nor my system restore. (I run WIN XP SP2 Zone Alarm, & Fixit Utilities. My Spysheriff program was downloaded from the Spy Sherriff website and is a fully working programme.
HELP.Am I being naieve? I thought I was reasonably experienced with computers but now I'm confused over the whole issue
Comments, thoughts anyone?
WTF!
I tried going to safe mode and made it and I deleted all the
SpySheriff files but I need to modify the registry
BTW I'm typing this on another computer
HELP!
chickenultra@gmail.com
It killed my antivirus, the windows firewall and also removed my wallpaper..
I have eventually removed spy sherif, installed an antispyware and fixed my antivirus.
But still... the firewal (due to an unknown error windows cannot display the fiwall settings)
Destop wallpaper also messed up.
Those are small things, the true problem it caused is diferent. Ever since I got it my pc started to upload data with my full bandwith. I couldn't stop it, more than 600MB uploaded. I tried to kill all processes but the uploading continued.
I simply reformated my c: drive. Clean now.
Some people told me my pc was being used to send out ddos or mass spam...
spysheriff is one step ahead of me.. i dont even have the run... button so i used search and found it and stuff but it just doesn't work AHHH
i need spy sheriff gone.. are there any other methods?
After I had it removed from my system, I still couldn't change my wallpaper, and Windows Firewall wasn't working. This is what I did to fix it.
To get your wallpaper back, try this
Delete the following registry key
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "Wallpaper"=SZ:C:WINDOWSdesktop.html
Even if the key does not have a value set, remove the key anyway. This worked for me. Make sure to restart your computer after you delete the registry key.
To get Windows firewall back, go to this site. Worked like a charm for me.
http://windowsxp.mvps.org/sharedaccess.htm