spysherrif

  mik61ish 01:08 01 Nov 06
Locked

I AVG free it does a scan of my hardrive and it finds spysherrif it doesn't do anything with it like quarantine it etc, what is it? how do I get rid of it easily!

  lotvic 01:23 01 Nov 06

did a google - to remove have a read of click here
spysherrif is malware

  Fruit Bat /\0/\ 18:05 01 Nov 06

Spysheriff
is malware and should not be used to clean a PC from spyware/ adware/ malware.

It's pretty bad e.g. if you try to use System Restore you will find that Spysheriff erased your restore points, so that won't work.

Instead follow these steps:

1. Open task manager by pressing Ctrl-Alt-Del, and click on the "Processes" tab. Look for Spysheriff there and kill the process if you see it. If you see a process named "winstall" (winstall.exe) then delete this one also.

2. In the control panel goto "Add/ Remove Programs" and remove the "SpySheriff" program. If it says that it cannot uninstall, then you still have it running. It will uninstall once it's not running.

3. Your desktop background will not be restored by that uninstall. Go into the registry by starting RegEdit.exe from the start button

4. Look for this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

It will have about 6 values stored that disable certain things. Delete this whole branch ActiveDesktop - the system will work with default values afterwards.
Also delete this branch in your registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

5. Look in your root directory for a file named winstall.exe. Mine was in c:\ and 24064 Bytes in size.
This file is scheduled to execute each time you boot and it will re-install Spysheriff.
Delete that file.
Update:
there may also be additional executable files that were created at the same time as winstall.exe. T
those files may be named 'winstall.exe' and 'ibm00001.exe'.
You should delete those files as well.
If you have this file ibm0001.exe please see the other article regarding ibm0001.exe. at click here

6. Restart your system.

Done.

  sean-278262 18:15 01 Nov 06

mik61ish - I have had a similar variant of this in the past the best way I found to be rid of it was to back everything up and reinstall windows. Plus it will speed your computer up no end.

  mik61ish 21:27 01 Nov 06

Fruit bat Iv'e tried =

1. Open task manager by pressing Ctrl-Alt-Del, and click on the "Processes" tab. Look for Spysheriff there and kill the process if you see it. If you see a process named "winstall" (winstall.exe) then delete this one also.

I have looked here Ctrl-Alt-Del can't find Spysherrif, winstall or winstall exe here.

Also no sign in Add Remove programs.

I get SpySherrif shown when AVG does a scan of my hard drive & thats it do I just ignore it as its not affecting anything that I know of!

Also looked in regedit no sign of Spysherrif!

  skidzy 21:34 01 Nov 06

Sorry dont know much about this tool only the manual method. click here

This thread is now locked and can not be replied to.

Surface Pro (2017) vs Surface Pro 4

20 groundbreaking 3D animation technologies coming to Siggraph 2017

iPad Pro 12.9 vs Surface Pro 5