SpySheriff interface

SpySheriff is malware that disguises itself as an anti-spyware program. SpySheriff is also known as Brave Sentry, Pest Trap, SpyTrooper,^[1] & SpywareNo^[2].The program attempts to trick the user of an infected computer into buying the program by repeatedly informing them of false threats to their system.^[3] SpySheriff was initially difficult to remove from an infected computer^[4] and is difficult to remove manually^[5]. Attempting to remove it using the "Add/Remove Programs" applet in control panel does not remove all components^[6], and there is a chance that SpySheriff's components may be in the System Restore folders^[7]. SpySheriff can be easily removed using anti-malware tools^[5].

[edit] Websites

SpySheriff used to be hosted at www.spy-sheriff.com, however this website is now defunct.^[8] Several typosquatted websites also attempted to automatically install SpySheriff, including a version of Google.com/.ca (Goggle.com/.ca) and Toggle.com (the typosquatted version of toogle.com). As of 2009, these sites are no longer active^[9][10].

[edit] Problems caused by SpySheriff

Another version of SpySheriff.

A fake infection warning pop-up.

• SpySheriff reports false malware infections and uses poor heuristics to detect real malware infections^[1].
• The desktop background can be replaced with an image resembling a blue screen of death, or a notice reading: "SPYWARE INFECTION! Your system is infected with spyware. Windows recommends that you use a spyware removal tool to prevent loss of data. Using this PC before having it cleaned of spyware threats is highly discouraged.".^[6]

[edit] See also

• Rogue software
• Trojan horse (computing)

[edit] References

[edit] External links

• http://www.bleepingcomputer.com/forums/topic22402.html