"Briefing
› Name: SpySheriff
› Belong to Adware
› Producer: SpySheriff
› Url:
www.spysheriff.com Description:
SpySheriff is related to Adware. adware usually installed on computer without user knowledge. It is designed to display ads while internet explorer is running. Pop-up ads won't leave you even if you have been disconnected. Surely adware affects PC performance, you will find it hard to remove adware applications, ads contain pornographic content which is not suitable for you or even for your kids.
SpySheriff features:
Remove SpySheriff. Removal instructions
Tool created by: Noahdfear
Download smitRem.exe to desktop.
Launch smitRem.exe.
Click Start
Confirm box "All files have been extracted" by pressing OK
Reboot into safe mode.
Locate smitRem folder on desktop and run RunThis.bat file to start clean SpySheriff infection.
After smitRem has finished a file named smitfiles.txt should appear in c:/ directory. If SpySheriff was removed succesfully, file content should say that.
Reboot the machine into NORMAL MODE
Now SpySheriff should be gone
Automatic SpySheriff removal tools:
Spy Sweeper
Manual SpySheriff removal directions:
Attention! Before taking the following actions, please make your system and registry backup in case you make an error.
Clean registry entries (how to?):
HKEY_CLASSES_ROOT\clsid\{202b0efd-2cb9-039b-2b11-a3579d6d56a3}
HKEY_CLASSES_ROOT\clsid\{7c43e35c-a398-7c5f-b1ba-7e87073be150}
HKEY_CLASSES_ROOT\clsid\{9cb4ce93-8cc7-9e03-1037-2dd837e3a52e}
HKEY_CURRENT_USER\software\spysheriff
HKEY_CURRENT_USER\software\spysheriff\ie security
HKEY_CURRENT_USER\software\spysheriff\ie security\blockedlocations
HKEY_CURRENT_USER\software\spysheriff\process security
HKEY_CURRENT_USER\software\spysheriff\process security\policies
HKEY_CURRENT_USER\software\spysheriff\process security\policies\allowed
HKEY_CURRENT_USER\software\spysheriff\scan
HKEY_CURRENT_USER\software\spysheriff\system security
Remove files (how to?):
heur001.dll
heur002.dll
heur003.dll
iesecurity.dll
newdial.exe
procmon.dll
secure32.html
secure32.ph_
spysheriff.exe
spysherrif.bmp
uninstall.exe
[Program files dir]\spysheriff\uninstall.exe
[Program files dir]\spysheriff\procmon.dll
[Program files dir]\spysheriff\removed.wav
[Program files dir]\spysheriff\spysheriff.dvm
[Program files dir]\spysheriff\iesecurity.dll
[Program files dir]\spysheriff\notfound.wav
[Program files dir]\spysheriff\spysheriff.exe
winstall.exe
[common programs dir]\spysheriff\spysheriff.lnk
[desktop dir]\spysheriff.lnk
[Program files dir]\spysheriff\base.avd
[Program files dir]\spysheriff\base001.avd
[Program files dir]\spysheriff\base002.avd
[Program files dir]\spysheriff\found.wav
1950.exe
heur000.dll
[Program files dir]\spysheriff\heur000.dll
[Program files dir]\spysheriff\heur002.dll
[Program files dir]\spysheriff\heur003.dll
Remove directories (how to?):
[common programs dir]\spysheriff
[Program files dir]\spysheriff
© Copyright 2005-2006, spyware-removal-guideline.com, All Rights Reserved."
http://www.spyware-removal-guideline.com/spysheriff-removal