<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>elamb &#187; spy sheriff</title>
	<atom:link href="http://elamb.org/category/spy-sheriff/feed/" rel="self" type="application/rss+xml" />
	<link>http://elamb.org</link>
	<description>information system security, risk management, scam research</description>
	<lastBuildDate>Mon, 28 Nov 2011 02:27:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>How to get rid of SpySheriff:</title>
		<link>http://elamb.org/how-to-get-rid-of-spysheriff/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=how-to-get-rid-of-spysheriff</link>
		<comments>http://elamb.org/how-to-get-rid-of-spysheriff/#comments</comments>
		<pubDate>Fri, 10 Feb 2006 07:28:13 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=458</guid>
		<description><![CDATA[&#8220;I have a malware infection on my laptop, i go into safe mode and look into the files and the virus file comes up as spysheriff with an icon.&#8221; How do i get rid of it? Is it easy to &#8230; <a href="http://elamb.org/how-to-get-rid-of-spysheriff/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>
&#8220;I have a malware infection on my laptop, i go into safe mode and look into<br />
the files and the virus file comes up as spysheriff with an icon.&#8221;</p>
<div>
How do i get rid of it?<br />
Is it easy to get rid of?<br />
How did i come accross it?
</div>
<p>
*******************************************************</p>
<p>How to get rid of it?</p>
<p>Check out my site:<br />
<a href="http://elamb.blogharbor.com/hacked/removespysheriff.htm"><br />
http://elamb.blogharbor.com/hacked/removespysheriff.htm</a></p>
<p>If you have already, try this:<br />
<a href="http://www.bleepingcomputer.com/forums/How_to_remove_SpySheriff_Winstallexe_Spysheriffexe-t22402.html"><br />
http://www.bleepingcomputer.com/forums/How_to_remove_SpySheriff_Winstallexe_Spysheriffexe-t22402.html</a></p>
<p>The Easiest Way to get rid of it:<br />
Another way you may be able to remove it is to do a system restore:<br />
<a href="http://www.elamb.org/hacked/systemerror384.htm"><br />
http://www.elamb.org/hacked/systemerror384.htm</a></p>
<p>This is what I had to do because I had stuff going on even in Safe Mode.</p>
<p>How did I get it?<br />
I was surfing some serial/crack/warez sites.&nbsp; They are absolutely<br />
INFESTED with malware. Some porn sites are bad, but warez sites seem to<br />
be the worst.</p>
<p>
On way to Prevent it is to use FireFox:<br />
See top of this blog.</p>
<p><b><!--google_ad_client = "pub-4928750891199759";google_ad_width = 120;google_ad_height = 60;google_ad_format = "120x60_as_rimg";google_cpa_choice = "CAAQ9-OZzgEaCNTy02nFo3CrKI-293M";//--><br />
</b></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/how-to-get-rid-of-spysheriff/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Detected Spyware! System error #384</title>
		<link>http://elamb.org/detected-spyware-system-error-384/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=detected-spyware-system-error-384</link>
		<comments>http://elamb.org/detected-spyware-system-error-384/#comments</comments>
		<pubDate>Sun, 05 Feb 2006 13:28:35 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>
		<category><![CDATA[tutorials]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=457</guid>
		<description><![CDATA[This is a bogus error screen that replaces your browser&#39;s home page. The message Reads: Detected Spyware! System error #384 Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is &#8230; <a href="http://elamb.org/detected-spyware-system-error-384/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p align="center"><a href="http://www.elamb.org/hacked/systemerror384.htm"><img alt="detected spyware system error #384" src="http://www.elamb.org/hacked/images/detectedspysheriff.jpg" height="381" width="510"></a></p>
<p>This is a bogus error screen that replaces your browser&#39;s home page. The message Reads: </p>
<blockquote>
<p align="left"><strong>Detected Spyware! System error #384</strong></p>
<p align="left">Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is collecting the information about the sites you&#39;ve visited and the files contained in the folder Temporary Internet Files. Attention! Ask for help of install the software for deleting secret information about the sites you visited.</p>
<p align="left">You computer is full of evidences!</p>
</blockquote>
<p><em>More than likely, this message is just the tip of the iceberg. Using simple <a href="http://www.elamb.org/hacked/IDTools.htm">intrusion detection tools</a> you will see that your system has scores of viruses, trojans, worms and other malware installed on it. The message is trying to get you to purchase some <a href="http://www.elamb.org/hacked/removespysheriff.htm">scamware</a>.</em></p>
<p>&nbsp;</p>
<h3>How to remove the &#8220;Detected Spyware! System error #384&#8243; message and all the malware on your system?</h3>
<p>There are actually a few relatively easy ways for removing this malware:</p>
<blockquote>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm#removedetectedspyware">USE FREE (LEGITIMATE) ANTI-SPYWARE</a></p>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm#Systemrestore">PERFORM A SYSTEM RESTORE</a></p>
<p>COMPLETELY RE-INSTALL WINDOWS (self explanatory, and <strong>complete overkill</strong> unless you have rootkit on your system or something crazy like that.)</p>
</blockquote>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm"><strong>READ MORE HERE&#8230;</strong></a></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/detected-spyware-system-error-384/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Warning! Spyware detected on your computer!</title>
		<link>http://elamb.org/warning-spyware-detected-on-your-computer/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=warning-spyware-detected-on-your-computer</link>
		<comments>http://elamb.org/warning-spyware-detected-on-your-computer/#comments</comments>
		<pubDate>Thu, 02 Feb 2006 12:24:51 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
				<category><![CDATA[I got hacked]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<category></category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=456</guid>
		<description><![CDATA[LOOK, MA. NO SECURITY! Ever get one of these bad boys!?&#160; Warning! Spyware detected on your computer!Install an antivirus or spyware remover to clean your computerView the list of top spyware removers here. Take a guess where this link on &#8230; <a href="http://elamb.org/warning-spyware-detected-on-your-computer/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>LOOK, MA. NO SECURITY!</p>
<div><a href="http://www.elamb.org/hacked/warningspyware.htm"><img src="http://www.elamb.org/hacked/images/spydesk.jpg"></a></p>
<div>Ever get one of these bad boys!?&nbsp; </p>
<div><a href="http://www.elamb.org/hacked/warningspyware.htm">Warning! Spyware detected on your computer!<br />Install an antivirus or spyware remover to clean your computer<br />View the list of top spyware removers here.</a></p>
<p>Take a guess where this link on my desktop leads.</p></div>
</div>
</div>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/warning-spyware-detected-on-your-computer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Spy Sheriff Removal</title>
		<link>http://elamb.org/spy-sheriff-removal/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=spy-sheriff-removal</link>
		<comments>http://elamb.org/spy-sheriff-removal/#comments</comments>
		<pubDate>Thu, 08 Dec 2005 11:54:20 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Computer Security/Home Computer Security]]></category>
		<category><![CDATA[Computer Security/Home Computer Security/Home Computer ]]></category>
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[tutorials]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=357</guid>
		<description><![CDATA[I was doing some testing on my Windows XP system surfing about some sites of &#8220;ill repute&#8221; with IE6 and got hit with something called Spy Sheriff. Spy Sheriff is like a watered down version of PS Guard or Smithfaud.&#160; &#8230; <a href="http://elamb.org/spy-sheriff-removal/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I was doing some testing on my Windows XP system surfing about some<br />
sites of &#8220;ill repute&#8221; with IE6 and got hit with something called <a href="http://elamb.blogharbor.com/hacked/removespysheriff.htm">Spy<br />
Sheriff</a>.</p>
<p><a href="http://elamb.blogharbor.com/hacked/removespysheriff.htm"><img src="http://elamb.blogharbor.com/hacked/images/spysheriff.jpg"></a></p>
<p>Spy Sheriff is like a watered down version of <a href="http://elamb.blogharbor.com/hacked/psguardremoval.htm">PS Guard</a> or <a href="http://www.elamb.org/hacked/removesmithfraud.htm">Smithfaud</a>.&nbsp; Like <a href="http://elamb.blogharbor.com/hacked/psguardremoval.htm">PS<br />
Guard</a>, Spy Sheriff claims to want to remove all the malware it infects<br />
you system with.&nbsp; Both of these horrible bits of malicious code<br />
are what I like to call scareware.&nbsp; The get loaded on to your<br />
system along with about 100 other viruses, worms and trojans and take<br />
over you desktop with a message like &#8220;Spyware Infection&#8221;.&nbsp; The<br />
application then &#8220;scans&#8221; your system.&nbsp; And tells you that you must<br />
activate the Spy Sheriff or <a href="http://elamb.blogharbor.com/hacked/psguardremoval.htm">PS Guard</a> in order to clean your<br />
system.&nbsp; When attempt to <a href="http://www.elamb.org/hacked/removespysheriff.htm">remove Spy Sheriff </a>using Add/Remove programs, it simply adds itself again once you reboot.</p>
<p>In the background, all the malware they loaded on your system are<br />
collecting data and send status report to a parts of the world.&nbsp;<br />
The scareware will usually make sure you know this to convince you to<br />
buy their product.&nbsp; DO NOT GIVE THEM YOUR CREDIT CARD INFO!</p>
<p>Here is how to <a href="http://www.elamb.org/hacked/removespysheriff.htm">remove Spy Sheriff</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/spy-sheriff-removal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

