Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


hijackthis is clean but I still get spysheriff to come back.

  • Please log in to reply
No replies to this topic

#1 zvipesh


  • Members
  • 2 posts
  • Local time:01:56 PM

Posted 28 August 2005 - 06:51 PM


I "managed" to acquire the spysheriff nasties...
i followed the instructions on "how to remove spysheriff_wininstallexe_spy...." posting.

I must say that I have used it once before ..several months ago and it worked like a charm.... it was a great great help.... Thanks.

Two days ago it happened again, and again I used the same procedure..
It looks like it managed to remove the spysheriff until I connect the computer to the internet... at that time suddenly the spysheriff icon appears in the lower right corner and messages started poping up ...

In addition, The desktop gets filled with numerous short-cuts icons to Porno and other nondesirable sites.

After reading the Introduction to spyware and xxworms ... I came to the conclusion that I must acquired system type hijacking program.

since I am not very familiar with my registry values and definitions, I am asking for help ....

I have run the following:
(a) Cleanup!
( Ewido
Removed spysheriff program (using control panel)
and other programs listed in the posted communication.
(d) HijeckThis
(e) Smithfraud reg (I get a diiferent question than posted...
" Do you want to ADD .... to the registry ?" NOT Merge...
(f) Removed All from c:\windows\prefetch directory
at this point it should have worked .... but once I reboot and go to Normal mode AND have the Internet-Explorer on .... it starts all over again ...

thanks for any help....

Also , there always seem to have pops when using IE even though I ahve added the google bar that enables bloking ... it does not look like it is very effective ... it works but ...

I guess that I can deal with the pop-ups later , when I get my computer back ....

BC AdBot (Login to Remove)


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users