Rogue spyware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Help!
Am using Windows XP and have been invaded by SpySheriff. When I try to get
rid of it, the 'Uninstall' command in the control panel requires me to exit
SpySheriff before uninstall can take place. Problem is, I cannot find a way
of exiting.
Any suggestions, please?
 
Honda said:
Help!
Am using Windows XP and have been invaded by SpySheriff. When I try to get
rid of it, the 'Uninstall' command in the control panel requires me to exit
SpySheriff before uninstall can take place. Problem is, I cannot find a way
of exiting.
Any suggestions, please?
Click to expand...

Although Engel directed you to any earlier thread, you may have never found
it through the web interface. Therefore I'll quote Andy's answer in full:

You can use Add/Remove screen to remove SpySheriff if you
have downloaded this yourself but if its been downloaded
as part of a trojan infection then it will take alot more
work to remove it.

Has your desktop wallpaper changed to a spyware warning
and do you have icons in the system tray that say you are
infected with malware and need to download some rogue
remover such as SpySheriff to clean it. This is just a
couple of signs of this Trojan Infection

If you cannot remove this through Add/Remove screen Id
suggest using Hijack This and posting back the log it
produces to show if this is a Trojan Infection. The
Trojan drops files all over the place and most scanners
will not remove this, Last time I checked all the main
scanners (MS Antispy,Ewido,Adaware,Spybot) were failing
to find the main parts to this trojan so it kept coming
back, its also hooked into explorer.exe so it starts with
windows so it can be a pain if you miss some of the
entries for this as it will just download anything that
gets removed when your system restarts

Download Hijack This if needed :

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Save it to desktop or c:/drive, Run Hijack This and
choose to do a system scan and save the logfile, when its
finished it will open the results in notepad, post them
back and please do not fix anything using Hijack This as
most will be harmless or essential files.

You could post the results over at spywareinfo or
tomcoyote or other Hijack This forums but you will have
to wait a few days for a reply as they get swamped with
requests for help but if you post it on here I will get a
reply back to you within a couple of hours once Ive
checked the log.

Regards

Andy
 
-----Original Message-----
Help!
Am using Windows XP and have been invaded by SpySheriff. When I try to get
rid of it, the 'Uninstall' command in the control panel requires me to exit
SpySheriff before uninstall can take place. Problem is, I cannot find a way
of exiting.
Any suggestions, please?
.If you go to "Bleeping Computer" web site,go
Click to expand...
to "discussions" scroll down to "security",there is an
article on your problem.I think you will find it most
helpful.
Regards.
 
if you did install this to give it a try then you may be
able to just remove from Add/Remove and end the problem,

I tested SpyTrooper a couple of days ago and this is
SpySheriff under a new name and there is no way to stop
this starting with Windows as the option is disabled on
the free trial and they display a message that you need
to pay if you wish to stop this starting automatically.

Next time it says you need to shut down SpySheriff open
Task Manager (Control,Alt & Delete) and goto processes,
This will probably be listed under your own user name,
Not "System" "Network Service" or "Local Service". If you
find it in the list then press "End Process" then try to
remove it again

The alternative to this is to reboot into safe mode
(Reboot and keep tapping F8 then choose safe mode from
the list) and goto Add/Remove and then remove it as it
will not be running in safe mode,

Let us know if you have problems, If this is part of the
Trojan infection then its not a problem, we can
use "SmitRem" to remove the Trojan entries, repair the
damage and remove Spysheriff if its needed.

Regards Andy
 
Hi Again

Ive just checked this, You cannot stop Spysheriff
starting with Windows but you can easily exit Spysheriff
to uninstall it.

If you goto to Add/Remove and click Spysheriff and
press "Remove" it says it cannot uninstall Exit
SpySheriff first.

Right Click Spysheriff in the system tray (Red & Orange
Circle) and choose :

"Exit Spysheriff(Disables Run-Time Protection)"

It then opens the Product Activation Pop-Up
choose "Continue Unprotected" and it will exit.

Then use Add/Remove again and it will then say :

"Are you sure you wish to remove SpySheriff and all of
its componetns" <- It is spelt this way :) Then it will
uninstall

You can also run task manager as explained in my last
post and choose "SpySheriff.exe" in the Processes List
and press "End Process" then you can remove it.

Regards

Andy
 
Back
Top