SpySheriff

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hello all!

I have the virus Spysheriff.
When I start the computer he restarts after one minute. Even in the
safe-mode is the same. The explorer and taskmanager is disabled.

Thank you very much,
Bernd



Re: SpySheriff

On Fri, 16 Feb 2007 18:44:11 +0100, Bernd Oswald wrote:
Quoted text here. Click to load it

You can use the "shutdown /a" command to stop the shutdown - reboot into
SAFE MODE, then click Start, Run, shutdown /a and press enter - this will
abort the shutdown.

This link should address your specific issue:
http://www.bleepingcomputer.com/forums/topic22402.html

Ignore anything posted by PCBUTTS1.

Only download software you can validate as uncompromised - in the case
of non-vendor site you have no guarantee that the files are unmodified
or uncompromised. Anyone providing a link to a non-vendors site with a
direct download should not be trusted, the vendors sites are the safest
place to download their application.

No person of sound mind would download files from a hack site that
requires a password to access the unknown files when they are available
directly from the vendors.

Always remember - only download files from Trusted Sites.

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in order
that I would use them myself:

Dave Lipman's tools:
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072

Rogue Fix -  This removal tool is the property of Internet Inspiration
http://www.internetinspiration.co.uk/roguefix.htm

AdAwareSE can be found here:
http://www.lavasoft.com/download_and_buy/detection_database /

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

--
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an
abusive nature created by PCBUTTS1 and still hosted on his public
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,
http://www.pcbutts1.com/license.htm ,
http://www.pcbutts1.com/downloads/max.htm ,
http://www.pcbutts1.com/downloads/mpv.htm ,
http://www.pcbutts1.com/downloads/wtcpcb.htm ,
http://www.pcbutts1.com/cracks.htm ,
http://www.pcbutts1.com/Loutheasshole.htm
All while spamming his company website at: http://www.seedsv.com

Re: SpySheriff


Quoted text here. Click to load it

Thank you very much, now I am in the safe mode and the system dont shutdown.
I followed the link and used smitfraudfix, but the program cant find a path
and it dont make the scan.

Spysheriff is still active, when I restart the computer.

Thanks a lot,
Bernd



Re: SpySheriff

On Fri, 16 Feb 2007 19:34:02 +0100, Bernd Oswald wrote:

Quoted text here. Click to load it

There were more links in that message I sent you - use the ones related to
David Lipman.

L

 
--  
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an  
abusive nature created by PCBUTTS1 and still hosted on his public  
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,  
http://www.pcbutts1.com/license.htm ,  
http://www.pcbutts1.com/downloads/max.htm ,  
http://www.pcbutts1.com/downloads/mpv.htm ,  
http://www.pcbutts1.com/downloads/wtcpcb.htm ,  
http://www.pcbutts1.com/cracks.htm ,  
http://www.pcbutts1.com/Loutheasshole.htm  
All while spamming his company website at: http://www.seedsv.com

Re: SpySheriff


| Hello all!
|
| I have the virus Spysheriff.
| When I start the computer he restarts after one minute. Even in the
| safe-mode is the same. The explorer and taskmanager is disabled.
|
| Thank you very much,
| Bernd
|

Please be VERY specific about "When I start the computer he restarts after one
minute."

In your reply, please describe what is displayed and what is the EXACT wording
of the
message that is shown prior to the system restarting.  A system re-starting is
not a symptom
of the non-viral malware called "SpySheriff".


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: SpySheriff



Quoted text here. Click to load it
Hello !

You are right. I could clean my computer from SpySheriff. But now I have the
Problem, that he restarts after one minute with the message : "Windows has
to be restarted, because the service DCOM-Server-process was shutdown
unexpected"

It is a Translation from german into english.

I  scanned with stinger, but now result.

I stop this with shutdown /a.

Thank you,
Bernd

Quoted text here. Click to load it



Re: SpySheriff



| Hello !
|
| You are right. I could clean my computer from SpySheriff. But now I have the
| Problem, that he restarts after one minute with the message : "Windows has
| to be restarted, because the service DCOM-Server-process was shutdown
| unexpected"
|
| It is a Translation from german into english.
|
| I  scanned with stinger, but now result.
|
| I stop this with shutdown /a.
|
| Thank you,
| Bernd
|

That wasn't the EXACT texxt was it ?

German ?
Was it really something like...

NT AUTHORITY\SYSTEM
"Windows must now restart because the DCOM Server Process Launcher service
terminated
unexpectedly."

Are you using WinXP SP2 ?

Have you made changes to hardware ?

From what I have read, this has been reported to have been caused by hardware
problems and
not by malware.

Two instances were;  CPU and hard disk in RAID array.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: SpySheriff

New Spyerase version 10, it's fast and free. It now has over 1700 signatures
to remove  All variants of Virusburst, Spy sheriff and Antivermins. New
Feature, Spyerase
will now update your hosts file. This tool is designed to Specifically
remove all variants.
Scan time is about 2 minutes. Designed for Windows 2000/XP only. Password is
still required.
First read this page http://www.pcbutts1.com/downloads then download
Spyerase from here http://www.pcbutts1.com/downloads/spyerasesetup.zip

Check my feedback and see what others have said about it
http://pcbutts1-therealtruth.blogspot.com /


Feedback is very important to the development of Spyerase.
Let me know how it works. Send feedback here
http://pcbutts1-therealtruth.blogspot.com /

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com , David
H. Lipman, Max M Wachtell III  aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



Quoted text here. Click to load it



Re: SpySheriff

On Fri, 16 Feb 2007 14:38:19 -0800, pcbutts1 wrote:
Quoted text here. Click to load it

Before you download anything from butts site, check the links he's created
below (in my sig) and then determine if you really want to trust him.

--
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an
abusive nature created by PCBUTTS1 and still hosted on his public
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,
http://www.pcbutts1.com/license.htm ,
http://www.pcbutts1.com/downloads/max.htm ,
http://www.pcbutts1.com/downloads/mpv.htm ,
http://www.pcbutts1.com/downloads/wtcpcb.htm ,
http://www.pcbutts1.com/cracks.htm ,
http://www.pcbutts1.com/Loutheasshole.htm
All while spamming his company website at: http://www.seedsv.com

Site Timeline