Re: How to fix updates of spyware spysheriff?



2jwin wrote:

> This spyware has taken away access to the search menu, also to the
> management of user accounts, and the access to the remote access
> services within admin tools, How can I retrieve the default settings
> for the applications listed?

Spy Sheriff is evil malware. You have to clean up your computer. Start
by running noahdfear's SmitFraud and SpyAxe removal tool -
http://noahdfear.geekstogo.com/click%20counter/click.php?id=8
References - http://www.bleepingcomputer.com/forums/topic36868.html
http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Then run David Lipman's tool -
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

David's Instructions:
Execute SmitFraud.exe (Note: You must accept the default of C:\McAfee)
Choose Unzip
Choose Close

NOTE: You may have to disable your software firewall or allow WGET.EXE
to go through your firewall to enable WGET.EXE to download the needed
McAfee-related files.

Execute c:\mcafee\clean.bat (or Double-click on 'Clean Link' in c
\mcafee)

A final report in HTML format called C:\mcafee\ScanReport.HTML will be
generated. At the end of the scan, it will be displayed in your browser
(Opera, FireFox or Internet Explorer). It is suggested that you move
the report out of c:\mcafee before performing another scan.

Continue with general malware removal -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
.



Relevant Pages

  • Re: Spy Axe
    ... > Execute; SmitFraud.exe {Note: You must accept the default of ... You may have to disable your software FireWall or allow WGET.EXE to ... > FireWall to enable WGET.EXE to download the needed McAfee related files. ... > It is suggested that you move the report out of c:\mcafee before ...
    (microsoft.public.windowsxp.general)
  • Re: "stealth" spyware
    ... Execute; SmitFraud.exe ... You may have to disable your software FireWall or allow WGET.EXE to go through your ... FireWall to enable WGET.EXE to download the needed McAfee related files. ... It is suggested that you move the report out of c:\mcafee before performing another scan. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Virus name
    ... Execute; SmitFraud.exe ... You may have to disable your software FireWall or allow WGET.EXE to go through your ... FireWall to enable WGET.EXE to download the needed McAfee related files. ... It is suggested that you move the report out of c:\mcafee before performing another scan. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Some Help - Im Crazy ~ msp.cpl and Suslix
    ... Execute; Haxdoor.exe ... You may have to disable your software FireWall or allow WGET.EXE to go through your ... FireWall to enable WGET.EXE to download the needed McAfee related files. ... It is suggested that you move the report out of c:\mcafee before performing another scan. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Virus recovery Help
    ... Execute; SmitFraud.exe ... You may have to disable your software FireWall or allow WGET.EXE to go through your ... It is suggested that you move the report out of c:\mcafee before performing another scan. ... Please Copy and Paste the contents of the HTML Log file; ...
    (microsoft.public.windowsxp.general)