SpySheriff
Posted: May 30, 2006
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Ranking: | 19,020 |
---|---|
Threat Level: | 7/10 |
Infected PCs: | 204 |
First Seen: | July 24, 2009 |
---|---|
Last Seen: | January 27, 2025 |
OS(es) Affected: | Windows |
SpySheriff is a system hijacker that secretly installs to victim PCs. SpySheriff causes the desktop to change and display a fake warning message that tricks users into installing the antispyware software. SpySheriff forbids access to some web sites and may even block any attempts to connect to the Internet. SpySheriff can also disable some Windows essential components and tools such as the System Restore and the Date and Time application.
Aliases
More aliases (33)
Use SpyHunter to Detect and Remove PC Threats
If you are concerned that malware or PC threats similar to SpySheriff may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.
* See Free Trial offer below. EULA and Privacy/Cookie Policy.
Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:anr0129.exe, winstall.exe, wn0129.exe, us0129[1].exe
File name: anr0129.exe, winstall.exe, wn0129.exe, us0129[1].exeSize: 16.89 KB (16896 bytes)
MD5: eb790be93afb8481cfc43515b00976ab
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
anr10049.exe, Tempwn10049.exe, us10049[1].exe
File name: anr10049.exe, Tempwn10049.exe, us10049[1].exeSize: 16.89 KB (16896 bytes)
MD5: 4c636e4d39efb85c84831973f8134bc9
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
anr10077.exe, Tempwn10077.exe
File name: anr10077.exe, Tempwn10077.exeSize: 16.89 KB (16896 bytes)
MD5: 5353b1a6165776cd500f1ceb8080e4fe
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
Installer.exe
File name: Installer.exeSize: 578.56 KB (578560 bytes)
MD5: 242a20bae9cf9cb816a447150378c02d
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
SpySheriff.exe
File name: SpySheriff.exeSize: 415.74 KB (415744 bytes)
MD5: 0a75149998278734106f2a6f59ba965a
Detection count: 41
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
winstall.exe, webinstall[1].exe
File name: winstall.exe, webinstall[1].exeSize: 122.88 KB (122880 bytes)
MD5: e3e03c8bdfd1f9c7dc9f2103689c5018
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur002.dll
File name: heur002.dllSize: 119.8 KB (119808 bytes)
MD5: ee21fd7fa9a45453ed55ccb7ce7b9aaa
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur002.dll
Group: Malware file
Last Updated: May 6, 2024
C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur000.dll
File name: heur000.dllSize: 127.48 KB (127488 bytes)
MD5: ca4822789da674e2ae4658ee4250adb5
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur000.dll
Group: Malware file
Last Updated: May 6, 2024
C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur003.dll
File name: heur003.dllSize: 120.83 KB (120832 bytes)
MD5: bb06f2c0d34812d455aecc790aab74d4
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Documents and Settings\<username>\Desktop\Programming\rogueware\SpySheriff - Program Files\heur003.dll
Group: Malware file
Last Updated: May 6, 2024
More files
Registry Modifications
File name without pathSpySheriff.lnkRun keysWindows installer
Suberp Website good that we have websites as such to help even the tech people to remove manually the spywares. I wish this website should be popular as google
Thank you but all my programs including Task Manager are infected and won't open except for Mozilla Firefox