Threat Scorecard

Ranking: 15,584
Threat Level: 70 % (High)
Infected Computers: 84
First Seen: July 24, 2009
Last Seen: May 6, 2024
OS(es) Affected: Windows

SpySheriff is a fraudulent anti-spyware application that is designed by devious hackers to profit from credible computer users. SpySheriff may be brought into your computer by a Trojan through browser security cracks, or may be downloaded directly from www.spysheriff.com. SpySheriff has the ability to generate false warning messages that appear in your taskbar. These fake messages are produced after a "scan" that SpySheriff emulates to raise its credibility. After SpySheriff "detects" parasites on your computer, it will continuously offer you to purchase the full version of the program, in order to dispose of the non-existent threats. Immediate removal of SpySheriff is strongly recommended.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
TrendMicro PAK_Generic.001
Symantec Downloader
Sunbelt Trojan-Downloader.Gen
Sophos Troj/Dropper-MG
Panda Adware/MediaTickets
NOD32 Win32/Adware.MediaTickets.A
Microsoft Adware:Win32/PurityScan.dr
McAfee-GW-Edition Trojan.Crypt.XPACK.Gen
McAfee potentially unwanted program Adware-PurityScan
K7AntiVirus not-a-virus:AdWare.Win32.PurityScan
Ikarus not-a-virus:AdWare.Win32.PurityScan.u
Fortinet Adware/Purityscan
F-Secure W32/Malware
eTrust-Vet Win32/Secdrop.NA
eSafe Win32.Downloader

SpyHunter Detects & Remove SpySheriff

File System Details

SpySheriff may create the following file(s):
# File Name MD5 Detections
1. heur002.dll ee21fd7fa9a45453ed55ccb7ce7b9aaa 11
2. heur000.dll ca4822789da674e2ae4658ee4250adb5 11
3. heur003.dll bb06f2c0d34812d455aecc790aab74d4 11
4. heur001.dll 840c8e9d2aaccc87d6dad1d409e45a10 9
5. hcafnqkc.exe 564aabe45a3f7e71483a1ad2b1d31722 1
6. winstall.exe 615a2cb4237176ca8438137e5f62cfeb 0
7. anr10049.exe, Tempwn10049.exe, us10049[1].exe 4c636e4d39efb85c84831973f8134bc9 0
8. anr10077.exe, Tempwn10077.exe 5353b1a6165776cd500f1ceb8080e4fe 0
9. anr0129.exe, winstall.exe, wn0129.exe, us0129[1].exe eb790be93afb8481cfc43515b00976ab 0
10. wancp.dll aa86aa134fbfdc57ceda90d506315ea8 0
11. Installer.exe 242a20bae9cf9cb816a447150378c02d 0
12. SpySheriff.exe 0a75149998278734106f2a6f59ba965a 0
13. winstall.exe, webinstall[1].exe e3e03c8bdfd1f9c7dc9f2103689c5018 0
14. winstall.exe b917ffe96edb3ae8cac14d4a19787706 0
15. z16.exe 2c66bd64d7780183a36da8e3e8394712 0

Registry Details

SpySheriff may create the following registry entry or registry entries:
File name without path
Run keys
Windows installer


SpySheriff may create the following directory or directories:


Related Posts


Most Viewed