Question:
My computer is infected by something called spy sherif and i cannot seem to uninstall it. can anyone help?
2006-10-15 04:55:51 UTC
My computer is infected by something called spy sherif and i cannot seem to uninstall it. can anyone help?
Twelve answers:
2006-10-15 04:58:47 UTC
Try some cleanup ant-ispyware. You should have an anti-spyware solution on your computer. I recommend that you go to http://www.download.com and get AD-AWARE and SpyBot Search & Destory. Install, run, update and scan your computer with both programs.



Ad-aware helps to clean files. SpyBot helps to clean your registry. So between these two, you might be able to RIP SpySherif out of your system.
hfdsguy
2006-10-15 05:00:06 UTC
Depending on how safe you surf, you may not need an active monitoring app,

such as TeaTimer, which is in Spybot S&D.



By installing the hosts file, IE-SPYADs, SiteAdvisor and WinPatrol,

you will have a pretty good line of defense which won't use up any resources.

this is the link you reqire for the apps http://temerc.com/hddncounttuts.html





And of course a firewall is a must,

tho the XP SP 2 firewall is not sufficient in my opinion.

It only blocks incoming attacks, and should something get thru and that's always possible,

then it can call out to get more things installed or use your machine as a zombie

I'd recommend Zone Alarm, but one of the older versions from here:

http://www.oldversion.com/program.php?n=zalarm



Either of the 4.5 versions seem to work best, less buggy than current ones

this is the link you reqire for the apps http://temerc.com/hddncounttuts.html



as far as anti virus i reccomend avg free edition as it includes free updates
2006-10-15 05:01:48 UTC
Here's the specific virus removal tool to remove Spy Sherif with. http://www.spywareremove.com/removeSpy_Sherif.html

Please download it and run it.



It'll get rid of it for you.



Manual removal instructions are also there on that page, but I'd recommend your using the tool instead.



All the best.



Cheers
sarah c
2006-10-15 06:03:03 UTC
You need AVG anti spyware, and you need to run it in Safe Mode.

Before attempting to remove malware you must switch off System Restore as back up files will be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.

Run your anti virus and anti spyware in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.



Then beef up your security. Its easier to prevent malware getting on to your sytem in the first place rather than trying to remove it.



The Windows firewall doesn't stop malware on your pc from dialling out. Zone Alarm firewall is free for personal use and stops unwanted incoming and outgoing traffic. You choose which programs are allowed to access the internet. It's fairly easy to use and updated regularly.

http://www.zonelabs.com Zone Alarm firewall



Shields Up security site;

https://www.grc.com - check your firewall works

http://www.grc.com/optout.htm - grc anti spyware program and info.



http://www.mozilla.com/ Firefox web browser

http://www.opera.com/ Opera web browser

Instal both these web browsers, turn off javascript on one and use that browser for vising unknown websites. They don't support Active X so thats one less way for problems to get on your pc.



Winpatrol is a handy utility that tracks cookies on your pc and stops unwanted changes to your startup folder.

http://www.winpatrol.com



Spywareblaster works with Internet Explorer and Firefox. It won't uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.

http://www.javacoolsoftware.com



http://www.siteadvisor.com -Site Advisor warns about malware on sites you are about to visit.



http://www.avast.com - Avast Antivirus



http://www.ewido.net - AVG(Ewido) anti trojan



http://www.lavasoft.com - Ad-Aware SE Personal anti adware



http://www.safer-networking.org - Spybot Search and Destroy anti spyware



http://spywarewarrior.com/rogue_anti-spyware.htm - The Spyware Warrior site identifies fake anti spyware programs.



http://www.bitdefender.com -BitDefender can be used as a second, on demand anti virus.



http://www.ccleaner.com Cr*pcleaner Registry cleaner and privacy tool



You can also download Microsofts free Windows Defender from the official Microsoft site, and the Malicious Software Removal Tool.



Remember to update and run all of you anti malware programs at least once a week.
VR
2006-10-15 04:59:05 UTC
Here is a great anti-spyware software that you'll love. And best of all, you can download it for free: Adaware spyware removal.
deadkelly_1
2006-10-15 04:58:02 UTC
go to www.grisoft.com and download a free program called "ewido" it's spyware killer ... Spybot Search and Destroy should also get rid of it ... and I know that Defender from Microsoft website will also remove it ... good luck
pringle147963
2006-10-15 07:02:01 UTC
Spyware is a common problem and will affect all computers if your computer is not protected.



Read this forum which details how to use various anti spyware tools, instructions on how to set them up and even provides support if you have anymore questions.



General Spyware advice:

http://www.phx-web.co.uk/forum/index.php?board=8.0



Spybot:

http://www.phx-web.co.uk/forum/index.php?topic=21.0

Windows Defender:

http://www.phx-web.co.uk/forum/index.php?topic=78.0

HijackThis!:

http://www.phx-web.co.uk/forum/index.php?topic=57.0
2006-10-15 04:57:56 UTC
Just google "Spy Sheriff" and you will find all the info you need on getting rid of it.



I would do it for you......... but can't be bothered wasting my time when you can't be bothered yourself.
big_chris_fool
2006-10-15 07:01:29 UTC
http://www.superantispyware.com/superant...now that u have what u need....lets clean the pc first

go to start..run..type in msconfig.....press ok...new window...press start up..select disable all.press apply..press ok

go to start..run..type in prefetch in new window in top left corner..select edit..select all..press delete.......yes..delete all...

go to start..all programs..system tools..disc clean up..select c drive..after it has finished analyzing..check all the boxes..press ok..when it has finished cleaning..it will disappear...

now go to start..control panel...folder options.....view...u will see a option that says "show all hidden files and folders"..check that..press apply..press ok.....

ok....now we need to go into safe mode....turn off ur computer.....as soon as u turn it back on...u have to press f8 repeatedly until u see a screen that shows u several different options.....u need to enter the option " safe mode" use the arrow keys on keyboard to scrool to it..then press enter...after u afew moments..u will see log on as.....admin or user....select user....after that u will see ur desktop......now open antispyware..( please update this b4 going into safe mode)..click scan my computer....select full or complete system scan.....then press next..it might take ahour or so..after it has finished..remove what ever it finds...now close superantispyware....

go to start.run..type in...%temp%...press ok..new window..go to edit.select all..press delete..tes..delete all....

go to start..control panel...folder options.....view...click reset to default..press apply..press ok...

now restart your computer...u will see a pop up from system configuration...put a check mark in the little box..press ok

if this dont work.....go here and follow these instructions

http://noahdfear.geekstogo.com/...(download smitrem)

* Save it to C:\ Drive. Once it has downloaded, double click on it which will extract it. Do not run the actual program yet as it must be done in safe mode.

* Load into Windows Safe mode by restarting the computer and just before the Windows XP screen comes up, press F8 and choose safemode.



Once in Safemode:



* Goto the SmitfraudFix folder which you saved to C:\ Drive earlier and double-click on smitfraudfix.cmd

* A blue screen will come up saying “Enter your Choice: (1,2,3,4,L,Q):”. For this, Press no. 2 on your keyboard.

* SmitFraudFix will start scanning your computer for any files related to this infection, just wait and let it go though its process.

* Once finished it will ask “Registry cleaning - Do you want to clean the registry?” Press Y, as Yes

* SmitFraudFix may discover that your wininet.dll file is damaged (this doesnt happen in all cases so dont worry if it doesnt happen. If it does find that it is damaged, it will ask you to Replace Infected File? Press Y as Yes and hit Enter.

* It will ask you to restart the computer, please let it restart the PC.

* Your computer should be now free from infection however you should run your virus scanner or use a free scanner such as AVG Free......these are proven methods..they do work if u do it like described
2006-10-17 11:39:14 UTC
Use firefox and then get your computer checked by a hijackthis expert
2006-10-15 04:57:23 UTC
Here is a list of free scans.I would recommend running ewido first.

Spybots search and Destroy http://www.download.com/3000-8022-10122137.html?tag=pao

adaware se> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1

http://www.webroot.com/land/freescan.php

a-squared Free> http://www.emsisoft.com/en/software/free/

http://housecall.antivirus.com/housecall/start_frame.asp

http://housecall65.trendmicro.com/

X -Cleaner Micro Edition scan http://www.spywareguide.com/onlinescan.php

http://www.kaspersky.com/virusscanner

http://www.windowsecurity.com/trojanscan/

http://www.bitdefender.com/scan8/ie.html

http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm



http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

http://www.javacoolsoftware.com/spywareblaster.html

Spywareguard too.

http://www.javacoolsoftware.com/spywareguard.html

http://www.ewido.net/en/onlinescan/

Get free anti virus for free click here.

http://free.grisoft.com/doc/1

http://avast.com
mrfire_eater2
2006-10-15 05:00:14 UTC
go here

http://www.bleepingcomputer.com/forums/topic22402.html


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...