Spy Sheriff

spy sheriff activation code, how to remove spy sheriff from registry files, get rid of spy sheriff, remove spy sheriff, spy sheriff full serial number and activation code, removing spy sheriff, spy sheriff serials, avoid spy sheriff, spy sheriff remove, spy sheriff sepro, spy sheriff serial number and activation code, deleting spy sheriff, remove spy sheriff for free, download sheriff spy, get rid sheriff spy, created spy sheriff, sheriff spy uninstall, removal sheriff spy, spy sheriff, spysheriff

How I got Spy Sheriff?

I was innocently surfing serial/crack and porn sites with no firewall or virus protection when I suddenly given a load of spyware, virus' and trojans and a BONUS: Spy Sherrif. It might have loaded when I hit "OK" on some pop-up. Not sure.

All the trojans and viruses it comes loaded with send messages of your systems status and personal information to possibly hundreds of servers around the world.

In the above screen shot some of the malware packaged with Spy Sheriff are trojans sending SMTP [port 25]/email traffic to spf-jail1.us4.outbloze.com, mail*.messagelabs.com, mx.bol.com.br [Brazil], mx.centre.ru [Russia], and many other exotic black hat hacker locations around the world.

Who created Spy Sheriff?

You may be able to download spy sheriff at spysheriff.com, but I'm not sure if you will get all the bonus trojans and viruses its bundled with from the untamed Internet. Its more fun to ride the Net bareback (no protection) and get the gifts that keep on giving, malware.

It claims to be an "award-winning spyware removal utility." The fact that I could not uninstall spy sheriff and that it comes packaged with about 100 bits of malware make that claim hard to believe. Of course, I could be totally wrong. Go to their site and download it, let me know how things turn out.

Removing Spy Sheriff?

Since Spy Sheriff is usually bundled with scores of malware code, it is best to really clean your system.

1. Reboot and go into Safe Mode

Reboot your computer and HIT the “F8” Funtion Key like crazy If it doesn’t, work try again. The system should ask you what mode you want to boot in. You want “Safe Mode” or “Safe Mode with Networking” MORE ON SAFE MODE

2. Add/Remove Software Spy Sheriff

Once in Safe Mode, Go to Start | Run | Add/Remove Programs and remove "Spy Sheriff" Be advised, that even if you remove with Add/Remove it will load itself upon reboot if you don't get rid of "winstall.exe" -- go through all the steps.

3. Clean your system up with Adaware SE

To load Adaware for free go Majorgeeks.com

When installing, ensure that you update the signature files of Adaware.

Once loaded, do a "Full System scan" and an ADS scan

An ADS scan will require you to select a drive (select the C: drive.) ADS Scans look for files hiden in files.

4. Clean Spy Sheriff off with Spybot Search & Destroy

Once again you can get Spybot Search & Destroy from Majorgeeks.com

Install the updates once you have installed the software on you system. You may have to click on the desktop icon or go into Start | Programs to start Spybot Search & Destroy to do a complete system scan.

5. Make sure Spy Sheriff is gone

Once you boot back into Normal mode you will know immediately whether or not Spy Sheriff has been removed. If it is not, I would suggest running both Spybot and Adaware again to make sure you didn't miss any steps. If you still can not remove all the malware, check out what your system is doing with Netstat and Task Manager. It may give you some indication of what Malware is still being executed.

Here is what I saw on Task Manager

List of Malware it loaded on my system:

Spysheriff.exe

iexplorer.exe

exeha2.exe

winstall.exe (reloads Spy Sheriff after it is uninstalled)

iexplorer.exe (Variant of evivinv.virus, rapid Blaster)

mm.exe

z*.exe (z11, z12, z13.exe ect.)

sywsvcs.exe (Troj/Orse-L)

All can be deleted from Safe Mode or by using KillBox

Remove Spy Sheriff from Registry

Ad Aware, Spybot Search & Destroy and Hijackthis will delete
all entries in registry. But is for some reason you are still seeing
the “Spyware Infection” on your desktop here is how to remove it.

HKEY_CURRENT_USER\Software\Microsoft\Windows \CurrentVersion\Policies\ActiveDesktop
You will find values in that key that will disable things you want. Removing them will give you default values.

Also delete this branch in your registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows
\CurrentVersion\Policies\System

Here is a great method for removing spy sheriff

Spy Sheriff Serial Number/Activation Code?

Do not seek the Spy Sheriff Serial and Activation code. Avoid spy sheriff and remove it if you have it. If you want real anti-spyware software, use Spybot Search & Destroy.