Remove SpySheriff. Description and removal instructions

 
Title: SpySheriff
Also known as: Spy Sheriff
Type: Malware
Severity scale:SpySheriff severity is 60  (60 / 100)
 
SpySheriff is an extremely dangerous corrupt anti-spyware tool that sabotages a user's system in order to scare him/her into buying its "full" version. Unlike other rogues, Spy Sheriff does not only display fake threat scan reports, it may also block your access to internet and hijack your web browser.

If you have been infected with SpySheriff, use our manual removal instructions to get rid of it, or download a legitimate spyware remover from our database to do it for you.

Spy Sheriff is intersting parasite because its hard to remember its exact name.. There are plenty of misspelings like: spy sherrif, spysherriff, spysherif, spy sheriff and so on...


Related files: wallpaper.html, desktop.html, Uninstall.exe, procmon.dll, iesecurity.dll, heur003.dll, heur002.dll, heur001.dll, heur000.dll, winstall.exe, spysheriff.exe

SpySheriff properties:
• Shows commercial adverts
• Stays resident in background

SpySheriff snapshot:
SpySheriff removal

Automatic SpySheriff removal:

remover for SpySheriff

SpySheriff manual removal:

Kill processes:
spysheriff.exe, winstall.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SNInstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpySheriff
HKEY_CLASSES_ROOT\CLSID\{202B0EFD-2CB9-039B-2B11-A3579D6D56A3}
HKEY_CLASSES_ROOT\CLSID\{7C43E35C-A398-7C5F-B1BA-7E87073BE150}
HKEY_CLASSES_ROOT\CLSID\{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E}
HKEY_CURRENT_USER\Software\SpySheriff
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\SpySheriff
Delete files:
spysheriff.exe, winstall.exe, heur000.dll, heur001.dll, heur002.dll, heur003.dll, iesecurity.dll, procmon.dll, uninstall.exe, desktop.html, wallpaper.html
Delete directories:
C:\Program Files\SpySheriff
C:\Documents and Settings\[Current User]\Start Menu\Programs\SpySheriff

Delete all the files inside C:\Windows\Prefetch or C:\Winnt\Prefetch.

Other programs to remove SpySheriff:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 17/12/05
Information updated: 06/03/08

Additional resources related to SpySheriff:

Attention: If you know or you have a website or page about SpySheriff removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SpySheriff parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Guest. 2007-11-17 20:11:56
How To Remover Hu ~~ can help newbie

2. by Guest. 2007-10-17 08:10:53
hello ! sorry for my delay to reply to you ! because now i am in
guangzhou fair ,so some information is not detailed afther next week i will go back
and will contact with you !
best rgs
grace

3. by Guest. 2007-10-14 11:10:42
hi! I would like to be a spy
i wish i was a spykids
you don't know me because i am not english people i am thai people
my name is phleung noppawan satnawet
you can call me phleung
i went to be a spy

4. by Guest. 2007-06-29 11:06:34
Please help me. I have this stupid SpySheriff and it will not let me on the internet period. So I cannot use any of these great sounding "removal downloads". How do I get rid of it without downloading something? Is there something I could buy at a store? Thank you for any help.

5. by Guest. 2006-09-03 20:09:02
I sucessfully removed spysheriff from my computer by system restore.

6. by Guest. 2006-08-18 07:08:31
Confused!
I was doing a casual search for spyware programs and was stunned to see all the warnings about spy sheriff.
I have been using Spy Sheriff for over a year and have to say that i have never had problems with the program (I thought) My system runs smoothly and Spy Sheriff has always kept spyware off my computer. NOW I AM WORIED! Reading others experiences and removal problems I decided to uninstall it, which I did very easily. It never effected my desktop settings nor my system restore. (I run WIN XP SP2 Zone Alarm, & Fixit Utilities. My Spysheriff program was downloaded from the Spy Sherriff website and is a fully working programme.
HELP.Am I being naieve? I thought I was reasonably experienced with computers but now I'm confused over the whole issue
Comments, thoughts anyone?

7. by Guest. 2006-08-10 15:08:18
I can't even start up Windows XP normally!
WTF!
I tried going to safe mode and made it and I deleted all the
SpySheriff files but I need to modify the registry
BTW I'm typing this on another computer
HELP!
chickenultra@gmail.com

8. by Guest. 2006-08-06 11:08:56
I got it yesterday from running an exe file from a warez site..
It killed my antivirus, the windows firewall and also removed my wallpaper..
I have eventually removed spy sherif, installed an antispyware and fixed my antivirus.

But still... the firewal (due to an unknown error windows cannot display the fiwall settings)
Destop wallpaper also messed up.

Those are small things, the true problem it caused is diferent. Ever since I got it my pc started to upload data with my full bandwith. I couldn't stop it, more than 600MB uploaded. I tried to kill all processes but the uploading continued.
I simply reformated my c: drive. Clean now.
Some people told me my pc was being used to send out ddos or mass spam...

9. by Guest. 2006-07-17 12:07:52
kay it's not working for me...
spysheriff is one step ahead of me.. i dont even have the run... button so i used search and found it and stuff but it just doesn't work AHHH
i need spy sheriff gone.. are there any other methods?

10. by Guest. 2006-07-04 08:07:18
how can I remove it from my computer? I try, but that doesn't go away.

11. by Guest. 2006-07-04 08:07:59
I want to remove this from my computer but that doesn't get out

12. by Guest. 2006-06-22 09:06:38
Search under files and folders for this: heur000/dll. Delete this file also. I used SpyBot to find and fix my spyware issues yesterday.

13. by Guest. 2006-05-14 15:05:04
Heh, SpySheriff's website looks so appealing.

14. by Guest. 2006-05-14 13:05:13
This virus is a real SOB. After you get rid of the files make sure you clean the Registry entries by goingo RUN, regedit, then go to edit and FIND. Type spysheriff, I found mine spysheriff under a folder in the Registry under SearchAgent.

15. by Guest. 2006-05-09 19:05:59
Regarding Spysheriff... if it disguises itself as a spyware remover, then how do I know that this isn't just like spysheriff?

16. by Guest. 2006-05-01 18:05:12
So, I've been trying everything that is suggested, removing the malicious processes, files, registry values, everything, but it's locked the entire computer up tight! is there anything else I can try?

17. by Guest. 2006-04-29 09:04:21
it's disabling me from downloading the automatic removals and i can't modify it in the registry files.

18. by Guest. 2006-04-19 23:04:37
I believe I got this SpySheriff through a hidden executable in MySpace when I tried to delete an email. When I clicked the DELETE button, I was taken to another page... and thus begins my tale. Hidden behind open windows was the .exe running and having a merry time, unnoticed by me until I was getting ready to log my PC off. I am going to try your removal methods as others have failed - I can't even download fixes from my PC right now.. it is blocking internet access, I can't access my System Restore.. everything is locked up tight (just like the #^%$#(%^$# who created this should be!). I am hoping this does it, as I don't want to re-format the hard drive. *sheesh*

19. by Guest. 2006-04-15 18:04:17
Thanks for the help with dealing with this problem. I probably would have spent days trying to fix this. You guys rock!!

20. by Guest. 2006-04-14 22:04:37
I recently had to recover from a Spysherrif attack
After I had it removed from my system, I still couldn't change my wallpaper, and Windows Firewall wasn't working. This is what I did to fix it.

To get your wallpaper back, try this

Delete the following registry key
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "Wallpaper"=SZ:C:WINDOWSdesktop.html

Even if the key does not have a value set, remove the key anyway. This worked for me. Make sure to restart your computer after you delete the registry key.

To get Windows firewall back, go to this site. Worked like a charm for me.
http://windowsxp.mvps.org/sharedaccess.htm

See more comments about SpySheriff >>>
Related news:
Similar parasites:
Related articles:
Related discussions: