Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

SpySheriff uses fake alerts and false positives to scam you into purchasing their software. SpySheriff may install undetected, hijack a user’s desktop, and display security warning messages to drive the user into pressing the “register” link. Use extreme caution when dealing with a malware like SpySheriff. Spysheriff may also stop any attempts to do a System restore by preventing the calendar and restore points from loading. SpySheriff can be difficult to remove and manual removal might lead to further damage to your computer.

Automated Detection for SpySheriff

SpySheriff Manual Removal Instructions

Stop SpySheriff system processes:

wn0129.exe
anr0129.exe
z16.exe
z14.exe
z12.exe
z11.exe
gimmygames11.exe
uninstall.exe
winstall.exe
uninstall.exespysheriff.exe
winstall.exe
spysheriff.exe

Unregister SpySheriff DLLs:

wancp.dll
ssldr32.dll
procmon.dll
iesecurity.dll
heur003.dll
heur002.dll
heur001.dll
heur000.dll

Remove SpySheriff files:

wn0129.exe
anr0129.exe
SpySheriff.lnk
z16.exe
z14.exe
z12.exe
z11.exe
SpySheriff
gimmygames11.exe
wancp.dll
ssldr32.dll
Windows installer
wallpaper.html
desktop.html
procmon.dll
iesecurity.dll
heur003.dll
heur002.dll
heur001.dll
heur000.dll
uninstall.exe
winstall.exe
wallpaper.htmlspysheriff.exe
desktop.html

Remove SpySheriff registry values:

SpySheriff
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpySheriff
HKEY_CURRENT_USERSoftwareSpySheriff
9CB4CE93-8CC7-9E03-1037-2DD837E3A52E
7C43E35C-A398-7C5F-B1BA-7E87073BE150
202B0EFD-2CB9-039B-2B11-A3579D6D56A3
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunSpySheriff
HKEY_LOCAL_MACHINE SOFTWAREMicrosoft Windows CurrentVersionUninstallSpySheriffHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunSNInstall
HKEY_CURRENT_USER SoftwareSpySheriff
HKEY_CLASSES_ROOTCLSID{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E}
HKEY_CLASSES_ROOTCLSID{7C43E35C-A398-7C5F-B1BA-7E87073BE150}
HKEY_CLASSES_ROOTCLSID{202B0EFD-2CB9-039B-2B11-A3579D6D56A3}
HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunSpySheriff
HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunSNInstall

Important Disclaimer

SpySheriff is related to:

  » PestCapture

  » PestWiper

  » AdwareSheriff

This entry was posted on Monday, July 10th, 2006 at 2:01 pm and is filed under Rogue Anti-Spyware Program, Trojans. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.