Love my family & adore animals! Always try
to have a positive mindset
SpySheriff
Updated on
Edit
Like
Comment
Share
Sign in
Spysheriff scan
SpySheriff, also known as SpywareSheriff, Brave Sentry, Pest Trap, SpyTrooper, Spywareno, and MalwareAlarm, is malware that disguises itself as an anti-spyware program. SpySheriff attempts to mislead a user into buying the program by repeatedly informing them of false threats to their system. It is very difficult to remove SpySheriff from machines, since it nests its components in System Restore folders, and also blocks some system management tools. Similar to most fake antiviruses, SpySheriff asks the user to register when they click "Remove found threats". However, SpySheriff can be removed if the user already has anti-malware tools on the machine, or owns a rescue disk.
SpySheriff used to be hosted at www.spy-sheriff.com from 2005 to late 2008 and is now defunct. Several typosquatted websites have also attempted to automatically install SpySheriff, including a fake version of Google.com (called Goggle.com). As of 2015, Goggle.com, which had changed ownership due to a lawsuit by Google, was a survey scam. It is currently a website that shows links to Amazon.com items.
Problems caused by SpySheriff
SpySheriff reports false malware infections and pretends to detect real malware infections.
Attempts to remove SpySheriff have been reported to be unsuccessful as SpySheriff will reinstall itself.
The desktop background may be replaced with an image resembling a blue screen of death, or a notice reading: "SPYWARE INFECTION! Your system is infected with spyware. Windows recommends that you use a spyware removal tool to prevent loss of data. Using this PC before having it cleaned of spyware threats is highly discouraged."
Going to add/remove programs to remove SpySheriff either causes the computer to crash or does not remove all components.
Any attempt to connect to the Internet via a web browser is blocked by SpySheriff, which replaces the user's desktop background with a blue warning screen saying that the system has been stopped to protect the user from spyware. However, users are still able to connect to Spy-Sheriff.com through the program's control panel.
SpySheriff stops any attempt to do a system restore by causing the calendar and restore points to not load. This causes the user to be unable to revert their computer to an earlier state. A loop hole has been discovered, in that if the user undoes the last restore operation, the system will restore itself, allowing a chance to remove SpySheriff.
SpySheriff can detect certain running anti-spyware and anti-virus programs and disable them by ending their processes as soon as it detects them, preventing its detection and removal by these programs as long as it is active on the system.
SpySheriff can disable the taskmgr or regedit tools that a user may attempt to bring up to end its active process or to remove its registry entries from Windows. Renaming the regedit and taskmgr executables will fool it, however.
