Spy Sheriff is one nasty spyware. If you search Spy Sheriff, one of the top result you will get is “SpySheriff – Spyware Remover and Protection Suite”. It claims to be a spyware remover and protection suite but what you don’t know is that the creator itself tries to sell their own products by secretly installing multiple spywares on your computer. When you get infected by Spy Sheriff, it actually drops many types of spyware into your Windows.
I was infected by Spy Sheriff few days ago and it wasn’t really impossible to remove. I believe there might be many variants of Spy Sheriff spyware because I searched around for removal techniques and never really found one that is able to 100% cleaned my version of Spy Sheriff spyware.


How do I know if I am infected by Spy Sheriff?
The most obvious is when you run your Internet Explorer, instead of bringing you to your default website which is usually MSN, it loads C:\secure32.html instead.

Another thing is you would see 2 different types of messages at your traybar.
1. Your computer is infected! Windows has detected spyware infection! Click here to protect your computer from spyware!

2. Your computer is infected! Windows has detected spyware infection! It is recommended to use special antspyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you. Click here to protect your computer from spyware!

For your information, Windows currently doesn’t have the capabilities to detect any spyware infection. So the detection is fake.

3. Spy Sheriff so called Spyware Remover and Protection Suite is automatically installed on your computer.

4. Upon being infected by Spy Sheriff spyware, my MSN Messenger no longer working.

All the trojans and viruses it comes loaded with send messages of your systems status and personal information to possibly hundreds of servers around the world.

In the above screen shot some of the malware packaged with Spy Sheriff are trojans sending SMTP [port 25]/email traffic to spf-jail1.us4.outbloze.com, mail*.messagelabs.com, mx.bol.com.br [Brazil], mx.centre.ru [Russia], and many other exotic black hat hacker locations around the world.

I’ve created a Spy Sheriff auto cleaner based on the Spy Sheriff spyware that I was infected. I’ve only tested this cleaner on Windows XP english version.

Please follow these directions and in the posted order.
1. Close all running programs such as your Internet Explorer and so on…
2. Download haxfix.exe and install.
3. Run HaxFix from Start -> Programs -> HaxFix and Press “2” to “Run auto fix“. It should automatically restart your computer when auto fix is completed.
4. Download Auto Cleaner/Removal for Spy Sheriff spyware
5. Double click “Run This Cleaner.bat” to start the cleaning of Spy Sheriff.
6. It should only take 1-2 seconds to remove Spy Sheriff from your computer.
7. Once completed, again, restart your computer manually.

Note: If this auto cleaner doesn’t work for you, just leave a comment below and let me know how you got infected by Spy Sheriff. I will do my best to update the cleaner based on your Spy Sheriff spyware infection.

Good luck in removing Spy Sheriff spyware!