|
Spy Sheriff removal
| Spyware Spy Sheriff Information |
Name: Spy Sheriff
Category: Trojan
Date: 2005-08-19
Dangerous: Yes
|
Spy Sheriff is rogue anti-spyware software that acts like a trojan horse. Spy Sheriff hijacks the desktop, changes the wallpaper to a warning message to lure the user into using the anti-spyware software [which fixes nothing] it installs.
Spy Sheriff description by publisher:
(Not True) Spy Sheriff an award-winning spyware removal tool will help you fighting all kinds of spyware & adware including key loggers, trojan horses, password thieves & on. With new & unique protection module once cleaned your machine will not get infected ever again.
This Trojan is also known as:
• spysheriff
• spy sherrif
• adware sheriff
>> Delete Spy Sheriff automatically - Download SpyHunter
| Spy Sheriff Removal Instructions |
|
Kill the following processes
1950.exe , newdial.exe , spysheriff.exe , uninstall.exe , winstall.exe
|
|
Delete these registry entries
SOFTWARE\spysheriff
SOFTWARE\Microsoft\Windows\CurrentVersion\uninstall\spysheriff
|
|
Remove the following files
1950.exe , Desktop.html , newdial.exe , spysheriff.exe , uninstall.exe , winstall.exe .
SpySheriff.lnk in Desktop\
|
|
Remove the following directories
Program Files\spysheriff
|
Bookmark Spy Sheriff page
| Visitor Comments on Spy Sheriff |
2005-08-29 16:43:24, vikram sharma:
Thank you all the entries listed above were found and it helped a lot :-)
2005-08-31 21:30:52, Guest:
Hello,
I know how to kill process.
I'm familiar with regedit.
Where do I remove the following files from?
1950.exe
newdial.exe
spysheriff.exe
uninstall.exe
winstall.exe
Desktop.html
Desktop\\SpySheriff.lnk
Do I do a search?
Thanks
2005-09-07 08:54:16, Guest:
I WANT DELETE SPY SHERIFF
2005-09-12 07:01:38, cathy:
i would like spysheriff of my computer ty
2005-09-19 13:25:02, Nicky:
Spysheriff has hijacked my computer and changed my desktop and I am having a hard time getting rid of it. I accidentally clicked a button and there it was this huge message "your computer is infected" and it has taken over my desktop. Do yourself a favor and do not use their product
2005-09-27 16:24:48, nigel:
I cannot get rid of this spy sheriff, it has ruined my desktop and infiltrated my computor. Do yourself a favour drive this company bust.
2005-10-04 13:09:54, Thank you!!:
Your instructions saved my PC from spysheriff!!! thank you so much!
2005-10-13 07:17:41, Guest:
Just caught this piece of crap. It has taken me 3 days to try to remove. Something was blocking Taskmgr so I could not even view the process info. Hope the above instructions do the business.
2005-11-18 08:36:35, Guest:
What was blocking Taskmgr? How did you fix that part?
2005-11-19 01:27:36, Guest:
the maker of spy sheriff need to be in jail it did all this stuff to my pc as well !!!
2005-11-19 14:34:46, Guest:
Hello, silly me I even try to pay for it online as it showed up as a genuine Windows warnin. Although the payment page said it was declined I can just hope that no payment was taken. I will call the bank anyway. Bloody nuisance.
2005-11-20 19:37:53, Guest:
thank you sooooo much...i have been trying ALL day trying to get rid of this thing...im finally free :)
2005-11-22 18:05:02, Guest:
I removed spysheriff, but now, my device manager is completely empty, i can not upload my webcam device driver, tells me error occured.
2005-11-23 07:25:43, Guest:
reformating, after spy sherriff was removed pc-cillin was detecting numerous outgoing emails, and i couldnt find the program causing it.
2005-11-24 01:09:09, Guest:
thanks mang my big bro said that looks like a virus...buh i disagreed cuz it showed up under windows...thats weird how that works buh thanks again
2005-11-28 15:58:39, Guest:
I can't enter to windows. Every time I turn on the PC it freeze up and don't let me do anything, can you please tell me how to get into windows to try remove the spy sheriff? I already did F8 and nothing. Thank you
2005-12-01 20:18:54, Guest:
if F8 doesnt boot your computer you are pretty much screwed
2005-12-03 21:33:04, Guest:
where do I find software//spysheriff and software//microsoft//windows... in order to delete those files? My computers hardcore screwed up right now.
2005-12-05 16:15:29, Guest:
its hard enough to find the company behind these stupid viruses, but the hardest part is finding the actual people that are behind it. i can only hope that someone out there is crazy enough to get them face to face and give these a**h***s what they deserve. you know what would be great? a webpage where people donate in order for someone to receive a reward for doing what we all want them to do. of course video evidence would be great.
2005-12-10 05:48:08, Guest:
I accidenaly clicked a link while searching the net and suddenly a lot of popups appeared and also opened msdos repeatedly with a command being entered automatically then i rebooted my pc and i started to have an error which say somthing like "vxgamet2.exe file is linked to missing export shell32.dll; strstrlA." then i also see errors lke maxd64.exe @ 0167:00401a37. pls help me.
2005-12-13 12:35:07, Guest:
My son accidentally downloaded it and I have been having a heck of a time getting rid of the malicious, moronic, malware. What happens when someone activates the key to Spy Sheriff and sends money? Is there any way to track down these truly evil people?
2005-12-14 23:53:23, Guest:
Like others , this darn thing showed up as a genuine Windows warning and check `you have been infected ` banner ` I am checking the net for fixit , bad stuff this SpySheriff.
2005-12-15 11:29:35, Guest:
I have been struggling with this Spy sheriff all day and all last night. It is so frustrating. The Black desktop warning appeared and the red circle X on my tray saying i am infected. I have been running spyware removals all morning. Now I dont know what to trust. I will bring it to a "specialist" today.
I will print the info you provided to see if it is good to use.
2005-12-15 14:32:41, Guest:
Pleeeeeeeeez somebody help. How do i get this fricken piece of crap off my pc. I am not familiar with registry keys and all of that. Is there a software pkg that would help.
2005-12-20 03:47:13, Guest:
I am reading all these messages from individuals and have found myself in the same position, first with "spyaxe", now "spysheriff". Isn't this Illegal? Are people allowed to manipulate technology like this to make it detrimental to our use of computers and the internet? There needs to be somekind of law against this!!
If anyone agrees, please write too!!
Thanks
CONCERNED!!!
2005-12-20 16:17:44, Guest:
To remove the desktop.html and restore you wall paperif infected by SpySheriff, open REGEDIT, and browse to: HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\POLICIES\SYSTEM and remove the Wallpaper entry, also broswe to:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\THEMES and remove the Wallpaper entry.
THis will restore you "Browse" button and allow you to choose your wallpaper once again.
Be sure to follow the other removal process's to complete the removal of SpySheriff, this should be done after you complete the above removal process.
Enjoy,
Scott Hasler
2005-12-22 11:10:40, Guest:
man, this thing is frusterating. i really need some help with this. I cant run my computer and constantly have to restart over and over again. I can find the processes spysheriff.exe and winstall.exe, but i dont know where the other three are. I found these processes by the way in the control+alt+delete panel thing. also i dont know where the registry entrees are. can someone please help me with this?
2005-12-23 04:42:50, Guest:
scott could you be more specific what is the registry entry name to delete
2005-12-23 10:16:16, Guest:
you will also find registries of the above files on:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars
in one of the {...} folders there will be one named:
FilesNamedMRU
and there you have plenty of registries to delete:
1950, spysheriff, ...
to access regedit just type regedit under command line mode
2005-12-25 05:22:38, Guest:
Hi everybody! I got Spysherrif this morning and It took me a while to eliminate it. I have a laptog so I don't know if this advice will help home PC users. I did a system restore on my lapdog to yesterday. My wallpaper came back and everything. I did a quick sweep with SpyHunter and it confirmed to have eliminated it. My laptop is back to normal!!
2005-12-26 04:22:07, Olem:
Thanks this page did it :-)
2005-12-27 20:33:37, Guest:
I m not familiar with processes, registries and directories. Can anyone tell me how to do the above instruction, please? (like how to kill the processes, Delete registry entries, remove files and remove directories.) PLEASE!!!
2005-12-27 21:01:35, Guest:
I just was a victim of this infamous Spy Sheriff and I clicked on a sight and it infested m computer. The virus is so realistic that I followed its instuctions and PAID, and downloaded it on my computer now I ruined my computer and cant get past this windows popup, I cant even get on the Internet and I was so stupid before I searched the origin of the software I downloaded it on my other computer. I feel like the stupidest person alive... Someone please help me get this program off both my computers!
2005-12-28 06:07:23, Guest:
this spy sheriff is a mess...I was trying to figure it out. I will use the helpful hints and see if it removes is...this is a pain in the butt glad I didn't pay for it.
2005-12-29 07:20:24, Guest:
How do you get the desktop back.
2005-12-29 13:30:22, Guest:
Got infected with this Spy sheriff stuff but did not pay anything, lucky me. Run some anti spyware prg like NOD32 but got stuck with a warning (Your system is affected by Spyware) in the middle of my screen. Followed instructions on this page and after that followed instruction from Scott Hasler (see below) as my "browse" button did not work. Now everything back to normal. Thanks to this site and Scott! Cheers Rogier
2005-12-29 22:00:25, Guest:
I have an unusual amount of occursces of regsvr32.exe running in my processes...what should I do? I'm not going to lie, I downloaded a virus from a pornographic site that I clicked on, and after being bombarded with pop-ups and such, I have been receiving all sorts of viruses and cannot for the life of me figure out how to get rid of it all! Help!
2005-12-30 06:02:38, Guest:
how do I get back my internet exployer Home page back it keep on defaulting to c:\secure32.html
I went to regedit and it would not update the default page. need help
2005-12-30 19:02:46, Guest:
I did what Scott said and it worked perfectly. So long Spy Sheriff!
2005-12-30 20:37:41, Guest:
I've removed all necessary processes from regedit...but can't seem to remove winstall.exe from the C: directory...any insight
2005-12-30 21:02:24, Guest:
to get rid of the winstall from the C directory...i renamed the file and then deleted it. seemed to go away
2005-12-31 15:15:37, Guest:
My computer doesnt have a 1950.exe file on it what shuold i look for instead?
Does anyone know how to remove this sheriff
2005-12-31 22:15:50, Guest:
i can't stop my internet homepage from defaulting to secure32.html but can't find the file anyone know how to stop this
2006-01-02 14:30:48, K:
First of all...thanks for the tips above, they worked GREAT!!
I'm having the same problem...secure32.html (located in the root of C) keeps crashing my IE and when I try to reset my homepage, it keeps going back to secure32.html. I removed the file, and then IE hangs...if anyone knows the answer,please let me know.
2006-01-03 13:42:48, Guest:
Many thanks to Scott - your advice and procedure was brilliant. I had a serious spyware infection and after healing the viruses was left with a wallpaper that I couldn't remove. I followed your instructions and returned to my selected wallpaper. Many thanks again - I will certainly pass this site infor on to my friends. David
2006-01-04 23:24:29, Guest:
Can anyone tell me how to get this annoying YOUR INFECTED box off my desktop? I have rid my PC of the virus but it will not let me change my desktop back....
2006-01-05 01:57:16, Guest:
i got rid of everything, i just need to know how i can change my wallpaper again
2006-01-05 15:44:10, Guest:
thanks for the help guys it was greata. it seems to be gone from my system but im gonna run some checks before i restart.
2006-01-05 19:45:43, Guest:
spysheriff wasted my time! thanks to this site i was able to remove it... keep up the good work...
2006-01-08 13:59:09, Guest:
I am not that great at this computer stuff and am having the worst time trying to get rid of Spy Sheriff. Can anyone who successfully cleaned it post step by step instructions on how to remove the program completely. I have been struggling with this for 5 days now.
Any help will be greatly appreciated.
2006-01-16 10:38:27, Guest:
I caught this crap On Kodak.com still trying to get rid of it
2006-01-21 19:05:39, Guest:
im trying to get rid of this thing but i cant!! pliz help me!!
2006-01-22 06:19:13, Guest:
SPY SHERIFF made me crazy i want to uninstal it but it wont
2006-01-23 17:42:01, Guest:
will someone help me remove spy sheriff step by step? please
2006-01-29 15:48:12, Guest:
im having a problem removing those little red circles with the x throught them but all of the other steps worked. i had spy sherrif on our whole network in a restaurant and those steps saved me a job
2006-01-29 20:17:22, Guest:
I think I removed most of it, but it still have the secure32.html as my homepage. I keep resetting it as my homepage but it still pops up...any answers on how to fix it?
2006-02-02 16:33:34, Guest:
Do I uninstall or delete the whole spysheriff folder?
2006-02-12 20:02:17, Guest:
This Piece of crap stealth-spyware came already installed on a new Toshiba laptop I purchased. It was showing up before I ever even connected this thing to my network. Great walkthrough, it's now gone. Thanks alot.
2006-02-14 23:42:25, Rachel:
I too have become a victim... Didn't pay though, thankfully.
One question, which has been asked before but wasn't answered: Does anyone know how to delete these files?
1950.exe
newdial.exe
spysheriff.exe
uninstall.exe
winstall.exe
Desktop.html
Desktop\\SpySheriff.lnk
Any and all help is greatly appreciated! =)
2006-02-15 19:47:20, Guest:
I am not able to remove spy sheriff. The program keeps running and my computer will not allow me to delete it if it is running. It does not appear to be running and I keep closing in out to no avail. Please help
2006-02-23 19:20:09, Guest:
I don't know what to do -ctrl alt delete wont even work. I can't get through any of the suggested steps without my computer freezing and stopping me. Any suggestions?
2006-02-26 01:04:12, Guest:
spy sheriff is blocking my taskmanager what do i do
2006-02-26 01:41:08, Guest:
I used the software this site is offering and my computer is now clean.
2006-03-02 22:38:00, Jason:
A quick work around is the following¨:
If you get infected by spysheriff do not I repeat do not "turn OFF system restore." Instead do a system restore prior to the date of the infection and then run an online scan and that should take care of it. If you disable system restore and then try to remove it all hell will break lose and its a pain to get it off if you dont know what your doing.
Also, if you have a hard time deleting files in normal mode I suggest you go into safe-mode and delete them from there (restart computer and press F8 several times till you see advance options mode and select safe-mode. To return to normal windows simply restart and it will do the rest.)
hope this helps.
2006-03-13 03:12:21, Guest:
hey guys. good info there. was up til 2am trying to get rid of it.... it really helps if you know what processes normally run on ur computer. i think ive gotten rid of it all (well, all the listed files anyway) still gotta get the net working properly... i dont have the secure32.htm problem though
2006-03-14 07:55:44, laserfloyd:
Anyone know if this crap would cause explorer.exe to take CPU useage to 50% nonstop? I thought I'd gotten rid of spy sheriff but it seems I haven't. Just wanted to see if anyone has had the explorer.exe CPU issues.
Will try this stuff when I get home today though.
thanks!
2006-03-20 10:03:15, Guest:
Man on the bottom (toolbar) it constantly always pops up. I cant seem to get rid of the last couple of parts. thanks.
2006-04-08 19:32:05, Guest:
Wow I bought the software link at the top and the SpyHunter worked. Thanks for the advice on the background thing as well. I hate this crap because it wastes so much time....with all the scans etc. I probably wasted at least four hours and I wish I could do something about this kind of crap. Thanks for your help guys.
2006-04-18 03:05:25, Guest:
how do i stop the pop ups that say spyware infection detected
2006-04-19 23:42:22, Guest:
kill the process temp2.exe. that's what worked for me.
2006-06-14 13:08:32, Guest:
This thing got on my laptop and then found its way on to my company network - YIKES! Had to reformat, one .dll file would not delete, and it managed to crash my antivirus program as well (which was the final straw as far as do I or don't I reformat). Embarassing and could have cost me my job. Why would anyone make a program to do this????
2006-07-14 08:59:00, Guest:
i have to spy sheriff virus to and everytime i turn on my computer it restartes every 10 minuets which really pisses me off because i can't really do anything
2006-09-20 09:12:37, Guest:
My business computer is also infected now, but the name of this criminal program has now been renamed pesttrap.exe , or at least that's what mine is infected with. All other symptoms seem to be the same, including the winstall.exe file. I think they renamed it because sites like this are catching on. I have yet to try the above steps--here's hoping they work.
2006-10-16 09:43:19, Rocz:
This Blackmail Virus cost me two days at work! It uses a rootkit to install itself, so you have to be able to get rid of the rootkit, or you will never truly get rid of it. This is one the FBI should definitely go after! SpySherrif uses a virus to blackmail you for money!
2006-11-27 03:15:51, MouNe:
Hello,
I have a huge problem with my business PC, I can't even enter windows: as soon as the windows-start up finishes loading and it enters the desktop a window error appears due to the process "temp2.exe" ("Windows has encountered problems running ...temp2.exe"). And the PC automatically restarts! @ first I quickly pressed on the "Don't send" button, and I could work properly but now, even when I press it, the PC restarts! Can anyone have a clue on how to fix this damn error??
2006-11-27 15:20:44, Guest:
iv got this 'winstall' on my computer that i cant get rid off after stupidly clicking on a link and it wont let me delete the file its making my computer freeze and keeps sending links so my contacts on msn to spread it. Help!!! how do i get rid of it??
2006-11-27 18:37:57, Guest:
that happened to me to got any idea how to take it off plz its driving me insane
2006-11-30 23:38:54, Guest1:
I accepted an alert from a friend on msn messenger, "is this you?" or similar. Please if you get this, do not click on the link! It will badly mess up your computer. What's worse, is once you click the link, it's sent to all your other contacts.
The files I had to remove were 'winstall' and 'mcnew', I don't know if the virus is fully off my computer.
At the moment I can't even access my emails. Everytime I try, the virus is loaded onto my computer again. I can remove it from my computer, but not my email... can anyone help please?
2006-12-27 15:35:53, Guest:
I followed the below instructions and got my desk top back after spy sheriff! Thanks, Gordy
2005-12-20 16:17:44, Guest:
To remove the desktop.html and restore you wall paperif infected by SpySheriff, open REGEDIT, and browse to: HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\POLICIES\SYSTEM and remove the Wallpaper entry, also broswe to:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\THEMES and remove the Wallpaper entry.
THis will restore you "Browse" button and allow you to choose your wallpaper once again.
Be sure to follow the other removal process's to complete the removal of SpySheriff, this should be done after you complete the above removal process.
Enjoy,
Scott Hasler
2007-01-12 06:38:34, Guest:
Remember, this spy-sheriff creates entry on antivirus software where it says exclude any ADWare softwares. Once this entry removed, make sure you put password protection for any Antivirus setting change, this will make sure that bloody spy-sheriff won't be albe to recreate this entry again!
2007-01-15 16:15:49, Guest:
The biggest thing to remember when trying to remove Spy Sheriff, as with many spyware/malware programs such as this, is that you must save the removal tool and/or instructions, then reboot into Safe Mode before attempting to remove. If you are logged in to normal Windows, you will not be able to properly get rid of all the components, and the spyware will remain.
2007-01-16 22:42:05, Guest:
I don't really know much about running windows programmer applications, but I did it the old fashioned way, I knew at first that it was a virus, so I found where it had been installed, and renamed and deleted every damn one of the files in there. I seem to get an error whenever I go onto explorer, though. I have to click ok twice to get to the browser
2007-02-11 09:49:10, Guest:
the reg key in HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\THEMES was the one that freed up my wallpaper. delete the wallpaper one in there.
2007-02-15 06:00:59, Guest:
i cant even load up safe mode, everytime i try it crashes and reboots. also, it never loads up msconfig... just reboots. god im stuck...
2007-02-15 23:57:57, Leila:
I first got Brave Sentry (another name for SpySheriff), after a few hours of my computer crashing I finally was able to access Windows in Safe Mode with Networking.
I got rid of Brave Sentry, but now I have SpySheriff and I've been busting my ass for two days trying to get rid of it. The only thing it has on my computer is desktop.htt but I can't locate this file, so I can't delete it.
Any advice on how to locate and remove:
desktop.htt
2007-03-07 01:17:12, Guest:
hi guys
i found a virus called temp2.exe in my system and after that my system automatically get shutdown.
help me out of this matter ... help
2007-03-30 22:15:37, Zilakila:
I find it useful to empty the temp internet dir from time to time.... It wont always help but if a viri is running from the temp dir this might help.
Greets to Karla :)
Bob
2007-04-18 17:41:39, wowzers:
im very mad my computer has spy sheriff too but i thought it was you know an actuall thingy so i looked it up to make sure and i find this website im so pruod of my self lol
2008-09-01 17:33:08, Guest:
i have spysheriff at the moment it hasnt done anything to minr, ive done virus scans it only seems to find it off AVG 8.0, have i not got a virus? :S Help please
2008-09-22 16:33:04, Guest:
their is still one open page where spy sheriff is availble for download sadly
2008-09-22 16:34:38, creator:
this program was not met to harm any of your computers i am very sorry download spyquake which i made to remove this i had some defenition files go bad and everything so type in spyquake download or ask someone for a link thanks
2009-04-23 12:02:33, hqq:
I know that spysheriff is a fake but where can I download it from so I can see what it does on a VM.
And if anyone has an activation code I would love to see what happens when it gets activated.
Thanks
2010-03-30 12:10:02, Guest:
One thing to remember: if anyone receives a pop up message telling you to click "ok", or if the message looks poorly written or just looks suspicious, DO NOT click "ok" and don't even click "cancel", if there is a cancel button. The safe thing to do is to close the window by clicking the X at the top right of the popup. Clicking "ok" or "cancel" can install spyware and viruses, such as Spysheriff, instantly, which can potentially harm your computer. This is just a tip to keep your computer safe.
|
|