Spysheriff

[Hugh]

Hi

Well I now have spysheriff on a box here (my home
machine) and it aint going away!

AntiSpyware beta sees nothing and says all is clean,
clearly a signature upgrade required here.

Desktop is screwed with some bogus message and weird
display in centre of screen about IE having probs, the
hex addresses look very much like the old segmented
addresses we all love and miss from the old Win 3.1 days.

Like I reported earlier elsewhere I cant report this or
any other using the reporting tool in AntiSpyware beta
because it fails!

I'd like to ask, just how many signatures get added to
the MS spyware database per week, I suspect its on the
low side, and if so this isnt very good.

H

 

[Engel]

Hello Hugh, download Ad-Aware

www.lavasoftusa.com

and make certain that "Search for negligible entries"
and "Search foAd-Awarer low risk entries" are checked.

Please reboot into safe mode logged in as administrator
and run a full antivirus and spyware scan with the latest
signatures.

Good luck

Engel

 

[Bill Sanderson]

I don't have experience with, or a sure-fire prescription for spsheriff, I'm
afraid. It seems to be a current scourge, so posting a HijackThis log to a
forum at www.aumha.org would probably get you sorted in short order, though.

Microsoft doesn't provide any information about threats covered by Microsoft
Antispyware--either in terms of numbers or names.

Comparative reviews of this product with other antispyware apps have had
favorable results, although the general consensus is that using multiple
products is still a good idea, because definitions and methodology differ.
Microsoft Antispyware, in the bulds distributed thus far, doesn't scan for
cookies, for example.

I believe that the team behind Microsoft Antispyware is, in fact, interested
in having it at the top of the charts in terms of effectiveness and breadth
of coverage. This is an area of research which isn't easy, and which
involves lots of proprietary and trade secret sorts of issues, so I think
looking at the results of reviews where the reviewers methodology is
comprehensive is the best way to compare products. So far, the results look
good for Microsoft.

 

[Alex]

Hope this helps with Spysheriff.

None of the software would remove it and it kept
reinstalling on my machine. there should be a couple of
files and a prefetch command in your documents and
settings.
The steps below were done in addition to running Ad-aware
and M antispyware. as they didn't resolve the problem.

1. Search for any file with spysheriff in it and delete.
2. Run Hijack this and look for the entry titled
HKCU\..\Run: [Windows installer] C:\winstall.exe
remove this entry. This is the installer that keeps
loading the program every time you boot up.

As the blue screen display, I am still working on that,
for some reason it is still locked.

the above steps have stopped this program and no longer
hogs resources.