21. by Guest. 2006-01-22 12:01:04
Anyone know how to get rid of pesttrap?
22. by Guest. 2006-01-22 14:01:59
whenever i restart my computer i have a bunch of different popups, i have ran spyware check on atleast 3 programs and they all find it, but still feels like somthing is wrong.the background is still there
23. by Guest. 2006-01-23 18:01:35
how do i re-activate my task manager?
24. by Guest. 2006-01-26 01:01:12
Recently, a computer of mine was infected by spysheriff. The task manager was disabled like mentioned in this article. I went to find the wallpaper in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System suggested by Guest. 09/01/2006. There was also a file named disabletaskmgr. I tried deleting it and the task manager was able to start without interference. I restarted the computer and the file was back. I repeated the operation and it was successful. I found out that it has opened many internet tasks behind the desktop which made my computer slow. Why does this file disabletaskmgr keep returning and how can I prevent it returning?
Also, at the time of infection a few of my desktop icons were mutated and names such as zxczxc and asfds were all that were left of their original names. The picture also turned into a white paper-like background with a screen with other icons on it. Another discovery was that there was a small button in the bottom right hand corner of the system tray which when pressed upon appeared to create spysheriff. It will not leave and it dont know why, but once when disabletaskmg" was deleted it disappeard when my cursor was placed over it.
Can anyone help me fix my problems?
25. by Guest. 2006-01-26 04:01:56
I removed most of SpySheriff successfully using the instructions above. The HKEY_CLASSES_ROOT items were not present on my computer though. The wallpaper is still locked so I will try the suggestion below. But now my computer keeps trying to access the internet. Norton Antivirus informs me msmsg.exe, and another couple of Windows executables are trying to connect automatically. They are fairly persistent so I have to keep blocking them with Norton. Any ideas?
26. by Guest. 2006-01-28 00:01:00
(Same person as 2 spaces below)
I have scanned my computer with spyware doctor and removed the files with the infections in it. But my background now starts up with the Active desktop recovery. I have deleted the mutated icons. In the tray, the icons volume and safely remove hardware were gone. It also says that the button that was used to install sypsheriff was still there under taskbar/start menu properties. The desktop icons also have a box around their names of the colour desktop display properties.
How can I fix active desktop recovery for every startup, stop this strange colour around icon names and get rid of the "Your computer is infected" button.
27. by Guest. 2006-02-04 08:02:46
Before you get spysheriff log off to another user and make a copy of your ntuser.dat file
if you get spysheriff go back to that user and remove the ntuser.dat file rename copy ntuser.dat to nturser.dat and make a new copy as a backup...
clean up program filesspy sheriff by using the uninstall spysheriff .exe in the folder
this will prevent the wallpaper like infected screen from being a problem to remove.
28. by Guest. 2006-02-08 00:02:16
Thanks guys!!! :D
I got infected last night and thanks to your site I am back to normal.
-Steve
29. by Guest. 2006-02-16 16:02:43
This is a Very Serious Threat. I tried all of the removal tips on this and several other sites. It just got worse every time, until it crippled my system even in Safe Mode. Had to rebuild it from scratch. These guys should be prosecuted to the fullest extent of the law.
30. by Guest. 2006-02-25 03:02:03
EEK!! I got it too!
Windows is crazy!(beyond its normal insanity, I mean)
When I open the task manager, I see that the cpu usage is ALWAYS at 100%.
Suddenly an red (X) icon appeared on the system tray, saying that windows has detected infection by spyware, and that I should should click there to get rid of that.
...and I thought "wow! I never heard that windows had such a detection system! Cool!"
But then, came that instantaneous html page. saying my ip and browser...
------------------------------------------- pirate_sephiroth@hotmail.com ---------------------------------------------
31. by Guest. 2006-02-25 08:02:21
I got tricked into buying it in december, It was wiping me out, I started up the the new windows onecare live set up system last week but that didi not help, then we put in the
Windows Defender Beta 2 and that took care of my problem,
Does anyone have an address can cancle my suscription for the spysheriff program I purchaced so the dont take money out of my acout next year . The beta program compleatly dealeated all traces of the sheriff from my computer and I cant find a place to cancle.
rpappas@frontiernet.net
32. by Guest. 2006-03-04 23:03:35
Okay, so I took care of all the components of SpySheriff that I could find. Then, the locked desktop properties issues arose (the wallpaper thing that 1/9 was speaking about). I ended up following what a previous comment said by deleting the ActiveDesktop folder in my registry and it did not restore itself. Is this going to be an issue at a later date or should I not worry about it?
33. by Guest. 2006-03-06 15:03:32
I cannot start my firewall after removing spy sheriff is there something I have missed
34. by Guest. 2006-03-23 16:03:35
I also got spy sheriff, removed it whit XoftSpy, which was no problem for the great program. But there is one thing i can´t get rid of. I can´t change my desktop bakround, it seames to be locked on my standard backround. Anyone how have sollowd this issue?
35. by Guest. 2006-03-24 07:03:23
Hey!
I had a SpySheriff and I've one question.
Does SpySheriff is entering a concern with huge virus programmers corporations? I mean that SpySheriff is downloaded with hundreds of trojans and viruses from web, from WMF file.
Thanks, answer on my mail: progg@wp.pl
Ps. I'm from Poland and I used www.translate.pl for translating my problem. Sorry for "new words" :-).
36. by Guest. 2006-04-09 15:04:43
help me please how to restore my original background!!!!!
i removed everything and the background still f-cked up.
thanks!
bone
bone@bonenet.hu
37. by Guest. 2006-04-14 22:04:37
I recently had to recover from a Spysherrif attack
After I had it removed from my system, I still couldn't change my wallpaper, and Windows Firewall wasn't working. This is what I did to fix it.
To get your wallpaper back, try this
Delete the following registry key
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "Wallpaper"=SZ:C:WINDOWSdesktop.html
Even if the key does not have a value set, remove the key anyway. This worked for me. Make sure to restart your computer after you delete the registry key.
To get Windows firewall back, go to this site. Worked like a charm for me.
http://windowsxp.mvps.org/sharedaccess.htm
38. by Guest. 2006-04-15 18:04:17
Thanks for the help with dealing with this problem. I probably would have spent days trying to fix this. You guys rock!!
39. by Guest. 2006-04-19 23:04:37
I believe I got this SpySheriff through a hidden executable in MySpace when I tried to delete an email. When I clicked the DELETE button, I was taken to another page... and thus begins my tale. Hidden behind open windows was the .exe running and having a merry time, unnoticed by me until I was getting ready to log my PC off. I am going to try your removal methods as others have failed - I can't even download fixes from my PC right now.. it is blocking internet access, I can't access my System Restore.. everything is locked up tight (just like the #^%$#(%^$# who created this should be!). I am hoping this does it, as I don't want to re-format the hard drive. *sheesh*
40. by Guest. 2006-04-29 09:04:21
it's disabling me from downloading the automatic removals and i can't modify it in the registry files.
Anyone know how to get rid of pesttrap?
22. by Guest. 2006-01-22 14:01:59
whenever i restart my computer i have a bunch of different popups, i have ran spyware check on atleast 3 programs and they all find it, but still feels like somthing is wrong.the background is still there
23. by Guest. 2006-01-23 18:01:35
how do i re-activate my task manager?
24. by Guest. 2006-01-26 01:01:12
Recently, a computer of mine was infected by spysheriff. The task manager was disabled like mentioned in this article. I went to find the wallpaper in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System suggested by Guest. 09/01/2006. There was also a file named disabletaskmgr. I tried deleting it and the task manager was able to start without interference. I restarted the computer and the file was back. I repeated the operation and it was successful. I found out that it has opened many internet tasks behind the desktop which made my computer slow. Why does this file disabletaskmgr keep returning and how can I prevent it returning?
Also, at the time of infection a few of my desktop icons were mutated and names such as zxczxc and asfds were all that were left of their original names. The picture also turned into a white paper-like background with a screen with other icons on it. Another discovery was that there was a small button in the bottom right hand corner of the system tray which when pressed upon appeared to create spysheriff. It will not leave and it dont know why, but once when disabletaskmg" was deleted it disappeard when my cursor was placed over it.
Can anyone help me fix my problems?
25. by Guest. 2006-01-26 04:01:56
I removed most of SpySheriff successfully using the instructions above. The HKEY_CLASSES_ROOT items were not present on my computer though. The wallpaper is still locked so I will try the suggestion below. But now my computer keeps trying to access the internet. Norton Antivirus informs me msmsg.exe, and another couple of Windows executables are trying to connect automatically. They are fairly persistent so I have to keep blocking them with Norton. Any ideas?
26. by Guest. 2006-01-28 00:01:00
(Same person as 2 spaces below)
I have scanned my computer with spyware doctor and removed the files with the infections in it. But my background now starts up with the Active desktop recovery. I have deleted the mutated icons. In the tray, the icons volume and safely remove hardware were gone. It also says that the button that was used to install sypsheriff was still there under taskbar/start menu properties. The desktop icons also have a box around their names of the colour desktop display properties.
How can I fix active desktop recovery for every startup, stop this strange colour around icon names and get rid of the "Your computer is infected" button.
27. by Guest. 2006-02-04 08:02:46
Before you get spysheriff log off to another user and make a copy of your ntuser.dat file
if you get spysheriff go back to that user and remove the ntuser.dat file rename copy ntuser.dat to nturser.dat and make a new copy as a backup...
clean up program filesspy sheriff by using the uninstall spysheriff .exe in the folder
this will prevent the wallpaper like infected screen from being a problem to remove.
28. by Guest. 2006-02-08 00:02:16
Thanks guys!!! :D
I got infected last night and thanks to your site I am back to normal.
-Steve
29. by Guest. 2006-02-16 16:02:43
This is a Very Serious Threat. I tried all of the removal tips on this and several other sites. It just got worse every time, until it crippled my system even in Safe Mode. Had to rebuild it from scratch. These guys should be prosecuted to the fullest extent of the law.
30. by Guest. 2006-02-25 03:02:03
EEK!! I got it too!
Windows is crazy!(beyond its normal insanity, I mean)
When I open the task manager, I see that the cpu usage is ALWAYS at 100%.
Suddenly an red (X) icon appeared on the system tray, saying that windows has detected infection by spyware, and that I should should click there to get rid of that.
...and I thought "wow! I never heard that windows had such a detection system! Cool!"
But then, came that instantaneous html page. saying my ip and browser...
------------------------------------------- pirate_sephiroth@hotmail.com ---------------------------------------------
31. by Guest. 2006-02-25 08:02:21
I got tricked into buying it in december, It was wiping me out, I started up the the new windows onecare live set up system last week but that didi not help, then we put in the
Windows Defender Beta 2 and that took care of my problem,
Does anyone have an address can cancle my suscription for the spysheriff program I purchaced so the dont take money out of my acout next year . The beta program compleatly dealeated all traces of the sheriff from my computer and I cant find a place to cancle.
rpappas@frontiernet.net
32. by Guest. 2006-03-04 23:03:35
Okay, so I took care of all the components of SpySheriff that I could find. Then, the locked desktop properties issues arose (the wallpaper thing that 1/9 was speaking about). I ended up following what a previous comment said by deleting the ActiveDesktop folder in my registry and it did not restore itself. Is this going to be an issue at a later date or should I not worry about it?
33. by Guest. 2006-03-06 15:03:32
I cannot start my firewall after removing spy sheriff is there something I have missed
34. by Guest. 2006-03-23 16:03:35
I also got spy sheriff, removed it whit XoftSpy, which was no problem for the great program. But there is one thing i can´t get rid of. I can´t change my desktop bakround, it seames to be locked on my standard backround. Anyone how have sollowd this issue?
35. by Guest. 2006-03-24 07:03:23
Hey!
I had a SpySheriff and I've one question.
Does SpySheriff is entering a concern with huge virus programmers corporations? I mean that SpySheriff is downloaded with hundreds of trojans and viruses from web, from WMF file.
Thanks, answer on my mail: progg@wp.pl
Ps. I'm from Poland and I used www.translate.pl for translating my problem. Sorry for "new words" :-).
36. by Guest. 2006-04-09 15:04:43
help me please how to restore my original background!!!!!
i removed everything and the background still f-cked up.
thanks!
bone
bone@bonenet.hu
37. by Guest. 2006-04-14 22:04:37
I recently had to recover from a Spysherrif attack
After I had it removed from my system, I still couldn't change my wallpaper, and Windows Firewall wasn't working. This is what I did to fix it.
To get your wallpaper back, try this
Delete the following registry key
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "Wallpaper"=SZ:C:WINDOWSdesktop.html
Even if the key does not have a value set, remove the key anyway. This worked for me. Make sure to restart your computer after you delete the registry key.
To get Windows firewall back, go to this site. Worked like a charm for me.
http://windowsxp.mvps.org/sharedaccess.htm
38. by Guest. 2006-04-15 18:04:17
Thanks for the help with dealing with this problem. I probably would have spent days trying to fix this. You guys rock!!
39. by Guest. 2006-04-19 23:04:37
I believe I got this SpySheriff through a hidden executable in MySpace when I tried to delete an email. When I clicked the DELETE button, I was taken to another page... and thus begins my tale. Hidden behind open windows was the .exe running and having a merry time, unnoticed by me until I was getting ready to log my PC off. I am going to try your removal methods as others have failed - I can't even download fixes from my PC right now.. it is blocking internet access, I can't access my System Restore.. everything is locked up tight (just like the #^%$#(%^$# who created this should be!). I am hoping this does it, as I don't want to re-format the hard drive. *sheesh*
40. by Guest. 2006-04-29 09:04:21
it's disabling me from downloading the automatic removals and i can't modify it in the registry files.