Stuck with Spy Sheriff. Help to remove it please! 4

[eman6]

That's it.
I don't know how this so called Spy Sherif got installed in my computer but now it starts every time I start windows and seems to scan my computer, display a prompt for registration and everything is frozen while the hard disk is spinning like nuts.
I tried safe mode and uninstall from the control panel Add/remove but did not help at all.
It starts with Windows no matter what I do (except in safe mode).
How do I get rid of this monster for the devil's sake?

Thanks for any advice in this matter.


_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[eman6]

Yea, I am thinking of hiring a security secretary to follow all this stuff for me on regular basis ;-)

_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[BadBigBen]

Well,

I wish someone would hire me... albeit not as a secretary (my legs are too hairy and I would look funny in a mini-skirt... LOL)...


Ben

If it works don't fix it! If it doesn't use a sledgehammer...

 

[Rleeunc]

My son's girlfriend left her PC with us to fix.
So messed up, get her desktop background, Spy Sheriff over and over again, and nothing else. Task Manager returns error that it has been disabled by the administrator even when looged in as the Admin. No start menu, no desktop icons, and won't boot in safe mode. Got it into safe mode command prompt and deleted losts of suff, but not enough. How do I get rid of this with the machine so crippled? Thanks !!!!

Rlee@ncdoi.net

 

[eman6]

Take my advice.

(1)
Get the hard disk out and connect it as external or secondary hard disk to a healthy PC.
(2)
Download and install ewido.
(3)
Run ewido and scan this hard disk and let it clean all for you.
(4)
When all is finished, get the hard disk back where it was (remember the master/slave setting matter).
(5)
Install Ewido there to keep an eye on the system for prevention.
(6)
If she is using Windows XP, let her create (or create for her) a non-administrative (limited) account and tell her to use the administrative account ONLY when installing software or modifying critical settings.

I hope it is not too late already.

_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[peterkoch]

Go to this registry location in regedit (found it by searching for desktop.htm)
HKEY_USERS\S-1-5-21-----------etc------etc---\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
then modify the NoChangingWallpaper value then you can click on properties on your desktop and change it
The name of the image is desktop.htm in your windows subdirectory so delete this also ( might be best to delete all references to desktop.htm in yor registry also)

 

[pechenegs]

find and delete this file if there.

C:\WINDOWS\desktop.html


run this file.

Download this file:

http://www.bleepingcomputer.com/files/reg/smitfraud.reg

Doubleclick smitfraud.reg and confirm you want to merge it with the regsitry.