Its SpySheriff under a different name, Go with Plun and
Andre's suggestions and try reset your IE settings (Start
Menu > Contol Panel> Internet Options) Goto the Programs
Tab and press "Reset Web Settings" and include the
hompage > then go back to the General Tab and enter the
homepage you want to use into the space provided and
press apply.
If you still have problems use Smitrem with Ewido in safe
mode as Smitrem will take out the Trojan files being used
by Spysheriff/PSGuard to infect pc's
Download Smitrem to your desktop
http://noahdfear.geekstogo.com/click counter/click.php?
id=1
Run the installer and then press Start to Extract the
files to the desktop, Do not run it yet.
Download the trial version of Ewido Security Suite
http://www.ewido.net/en/download/
Install ewido.
During the installation, under "Additional Options"
uncheck "Install background guard" and "Install scan via
context menu".
Launch ewido
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet.
Reboot into safe mode (Reboot and keep tapping F8 then
choose safe mode from the list)
Check Add/Remove Programs ( Start Menu> Control Panel>
Add/Remove Programs) for SpyTrooper and remove it if its
listed, If it is installed after removal also delete the
Spytrooper Folder from c:\Program Files area.
Run SmitRem
Open the SmitRem folder and double click the "RunThis"
file to start the tool , Follow the prompts on
screen. Wait for the tool to complete and disk cleanup to
finish.
Next Run Ewido
From the main menu click scanner then Complete system
scan, During the scan it will prompt you to clean files,
click "Remove" for anything detected, When the scan
finishes press "Save Report" and save it to desktop or
c:\drive incase you need more help with this.
Finally reboot back into normal mode
You will need to reload your wallpaper as the SmitRem
tool will reset it, you can do this by right clicking
desktop and choosing properties, First check Theme and
set it to Windows XP then click the Desktop tab and
choose the one you want to use and press apply,
Andy
