Home Spyware Database "SpySheriff Removal Guide"

SpySheriff Removal Guide

SpySheriff Description

SpySheriff Automatic Detection (Recommended)

Is your PC infected with SpySheriff? To safely & quickly detect SpySheriff, we highly recommend you...

Download SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats.

SpySheriff Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows File Search Tool to Find SpySheriff Path

"SpySheriff" files can be found in the directory path(s):
%ProgramFiles%\SpySheriff
Read more about How to Find SpySheriff with File Search Tool

Step 2 : Use Windows Task Manager to Remove SpySheriff Processes

Remove the "SpySheriff" processes files:
wn0129.exe anr0129.exe z16.exe z14.exe z12.exe z11.exe gimmygames11.exe uninstall.exe winstall.exe uninstall.exespysheriff.exe winstall.exe spysheriff.exe
Read more about How to kill SpySheriff Processes

Step 3 : Use Registry Editor to Remove SpySheriff Registry Values

Locate and delete "SpySheriff" registry entries:
SpySheriff HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpySheriff HKEY_CURRENT_USERSoftwareSpySheriff 9CB4CE93-8CC7-9E03-1037-2DD837E3A52E 7C43E35C-A398-7C5F-B1BA-7E87073BE150 202B0EFD-2CB9-039B-2B11-A3579D6D56A3 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunSpySheriff HKEY_LOCAL_MACHINE SOFTWAREMicrosoft Windows CurrentVersionUninstallSpySheriffHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunSNInstall HKEY_CURRENT_USER SoftwareSpySheriff HKEY_CLASSES_ROOTCLSID{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E} HKEY_CLASSES_ROOTCLSID{7C43E35C-A398-7C5F-B1BA-7E87073BE150} HKEY_CLASSES_ROOTCLSID{202B0EFD-2CB9-039B-2B11-A3579D6D56A3} HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunSpySheriff HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunSNInstall
Read more about How to Remove SpySheriff Registry Entries

Step 4 : Use Windows Command Prompt to Unregister SpySheriff DLL Files

Search and unregister "SpySheriff" DLL files:
wancp.dll ssldr32.dll procmon.dll iesecurity.dll heur003.dll heur002.dll heur001.dll heur000.dll
Read more about How to Remove SpySheriff DLL Files

Step 5 : Detect and Delete Other SpySheriff Files

Remove the "SpySheriff" processes files:
wn0129.exe anr0129.exe SpySheriff.lnk z16.exe z14.exe z12.exe z11.exe SpySheriff gimmygames11.exe wancp.dll ssldr32.dll Windows installer desktop.html procmon.dll iesecurity.dll heur003.dll heur002.dll heur001.dll heur000.dll uninstall.exe winstall.exe spysheriff.exe wallpaper.html desktop.html
Read more about How to Delete Harmful Files

Step 6 : View the SpySheriff Components with its MD5s

Remove the "SpySheriff" components:

File Name	File Size	MD5
anr0129.exe	16896	eb790be93afb8481cfc43515b00976ab
anr10077.exe	16896	5353b1a6165776cd500f1ceb8080e4fe
us10049[1].exe	16896	4c636e4d39efb85c84831973f8134bc9
hcafnqkc.exe	20992	564aabe45a3f7e71483a1ad2b1d31722
heur002.dll	119808	ee21fd7fa9a45453ed55ccb7ce7b9aaa
winstall.exe	29184	b917ffe96edb3ae8cac14d4a19787706
winstall.exe	16896	eb790be93afb8481cfc43515b00976ab
Tempwn10077.exe	16896	5353b1a6165776cd500f1ceb8080e4fe
winstall.exe	31232	615a2cb4237176ca8438137e5f62cfeb
SpySheriff.exe	415744	0a75149998278734106f2a6f59ba965a
heur003.dll	120832	bb06f2c0d34812d455aecc790aab74d4
z16.exe	393	2c66bd64d7780183a36da8e3e8394712
us0129[1].exe	16896	eb790be93afb8481cfc43515b00976ab
Tempwn10049.exe	16896	4c636e4d39efb85c84831973f8134bc9
Installer.exe	578560	242a20bae9cf9cb816a447150378c02d
heur001.dll	127488	840c8e9d2aaccc87d6dad1d409e45a10
webinstall[1].exe	122880	e3e03c8bdfd1f9c7dc9f2103689c5018
wn0129.exe	16896	eb790be93afb8481cfc43515b00976ab
anr10049.exe	16896	4c636e4d39efb85c84831973f8134bc9
wancp.dll	44516	aa86aa134fbfdc57ceda90d506315ea8
heur000.dll	127488	ca4822789da674e2ae4658ee4250adb5
winstall.exe	122880	e3e03c8bdfd1f9c7dc9f2103689c5018

SpySheriff Screenshots

View SpySheriff screenshots below and see for yourself how SpySheriff looks like. Learn how to recognize SpySheriff when it infects your machine.

(click on SpySheriff image to enlarge)

  

Back to Top

Publication Date

Tue May 30 2006 12:19:23 EDT

Site Disclaimer

SpywareRemove.com IS NOT associated, affiliated, consorted, or connected with the publishers or creators of SpySheriff.

User Comments

Username:    Raji    Date Posted:    2007-12-04 03:18:15    Comment: Suberp Website good that we have websites as such to help even the tech people to remove manually the spywares. I wish this website should be popular as google

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top