SpySheriff Removal Instructions

Why is it important to remove SpySheriff?

SpySheriff is an illegal and corrupt anti-spyware program!

SpySheriff may look like a legitimate anti-spyware, but it’s created only to scare you into purchasing SpySheriff. SpySheriff may scare you into buying it by overwhelming you with fake alerts or pop-ups. SpySheriff can’t prevent your computer from being infected with spyware — SpySheriff may actually damage your system.

I have SpySheriff, what do I do?

You have many options for detecting and removing SpySheriff. The most extreme is reformatting your PC, possibly costing you all of your data and definitely costing hour of time wasted on reloading your PC to its original form. Reformatting your computer should be your last resort. If you’re having problems finding SpySheriff, try using a preferred spyware scanner to quickly detect SpySheriff first. If you don’t have a spyware scanner, you can always try the instructional methods provided below.

• Start a full system scan to detect SpySheriff & other parasites.
• SpyHunter will automatically search for SpySheriff files.

Please note that SpyHunter’s free scanner is only for detection purposes. If SpyHunter’s scanner finds SpySheriff on your PC, you can buy SpyHunter’s full version to remove SpySheriff and other spyware.

Are you infected with SpySheriff?

Your machine may be infected with SpySheriff, if you have the following symptoms:
*Note: Symptoms tend to vary depending on software installed on your system and other system factors.

Symptom #1: A questionable red or green icon appears in your system tray next to the system clock, representing a newly installed program which you do not recall ever downloading. If you click on the icon a fake system alert popup will direct you to SpySheriff’s website. In some cases, even when you don’t click on the icon the fake system alert may still pop up.

Symptom #2: The questionable icon pops up a fake system alert that lures you into downloading SpySheriff program by stating that your computer is infected with dangerous spyware and that you should download SpySheriff program to remove the alleged infection. The false system alert may read:

“Your computer is infected! Windows has detected spyware infection! It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you. Click here to protect your computer from spyware!”

Symptom #3: Once you’re infected, rogue anti-spyware SpySheriff will run on every time Windows starts up. A screenshot of SpySheriff is provided below.

SpySheriff Manual Detection

If you’ve discovered that SpySheriff has infected your PC, you must act quickly and take the proper steps to eliminating the infection. Note: The manual removal of any parasite is difficult. To avoid the unnecessary risk of damaging your computer, we advise you to download SpyHunter’s spyware scanner tool to automatically detect SpySheriff.

To manually remove SpySheriff, follow these removal steps:

Step #1: Remove SpySheriff with Windows Add/Remove Programs utility.

Sometimes all it takes to get rid of spyware like SpySheriff is to remove the program using the Add/Remove Programs control panel in Windows.

1. In Windows XP Professional, click on Start > Control Panel > Add/Remove Programs
2. In Windows 2000 Professional / Windows ME / Windows 98, click on Start > Settings > Control Panel > Add/Remove Programs.
3. In the list of programs, search for the software you want to remove. If you see a program you don’t recognize or don’t recall installing, look it up in Google to learn what it is.
4. Select the questionable program and remove it with the Remove button.

Step #2: Kill SpySheriff using the Windows Task Manager

To kill a SpySheriff process that has infected your computer, you will need to use the Windows Task Manager to check by process, highlight the process in question, and then end the task. To do this:

1. Press CTRL+ALT+DEL or CTRL+SHIFT+ESC on the keyboard.
2. Click on Processes Tab to see all active tasks. For easier detection, left click the process under the heading Image Name.
3. Find and kill the following SpySheriff process:
   wn0129.exe
   anr0129.exe
   z16.exe
   z14.exe
   z12.exe
   z11.exe
   gimmygames11.exe
   uninstall.exe
   winstall.exe
   spysheriff.exe
4. Once you’ve identified the SpySheriff process, press DEL on your keyboard or click End Process to kill it from your system.

Step #3: Use PsKill to Kill a Process

Sometimes a parasite can disable your Windows Task Manager so you can use pslist and pskill (a third party application by Mark Russinovich) to list and kill the unwanted processes.

1. Download PsKill or PsList.
2. Extract the program from the .Zip archive.
3. Move pskill.exe to your C: drive.
4. Open a command window and click Start > Run.
5. Type cmd and click the OK button.
6. In the command window, type C:pskill.exe and the name of the process you wish to kill, then press Enter. For example, if you wanted to kill the process for SpySheriff, you would type: C:pskill.exe SpySheriff.exe.
   If the file was successfully removed, PsKill will say “process SpySheriff.exe killed”.
7. Find and Remove these SpySheriff files:
   wn0129.exe
   anr0129.exe
   SpySheriff.lnk
   z16.exe
   z14.exe
   z12.exe
   z11.exe
   SpySheriff
   gimmygames11.exe
   wancp.dll
   ssldr32.dll
   Windows installer
   wallpaper.html
   desktop.html
   procmon.dll
   iesecurity.dll
   heur003.dll
   heur002.dll
   heur001.dll
   heur000.dll
   uninstall.exe
   winstall.exe
   Arrayspysheriff.exe

   wancp.dll
   ssldr32.dll
   procmon.dll
   iesecurity.dll
   heur003.dll
   heur002.dll
   heur001.dll
   Arrayheur000.dll