Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Computer Help: Adsheriff won't go away,
http://www.freerepublic.com ^ | 2/13/2006 | The Detroit Metalhead

Posted on 02/13/2006 12:18:25 AM PST by MetalHeadConservative35

annoying spyware/virus called adsheriff won't go away

Ive tried using AVG,AVAST,Adaware,Xoftspy, and my adminstrator account in safe mode, none work

ive even installed windows formatting my harddrive and it showed up first time i logged on after installing.


TOPICS:
KEYWORDS: adsheriff; spyware; techhelp
Navigation: use the links below to view more comments.
first previous 1-2021-35 last
To: MetalHeadConservative35

Pummel BTTT.

FWIW: I use Norton System Works with live update, it is indestructable and has alerted me to full blown attacks, not just spyware adware stuff.


21 posted on 02/13/2006 12:45:22 AM PST by Eddie01
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

Do you have more than one hard drive in your computer?

If not, then either something you're loading contains the virus or you have a hole in your router's firewall allowing someone from the outside to infect you. I'd recommend disconnecting the computer from the Internet and trying again. After you have it securely configured then connect it back.


22 posted on 02/13/2006 12:49:38 AM PST by DB (©)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

Go to the bad programs home website and search around.

Many countries now have a law that the removal program has to be available for free and able to be downloaded from their site.

I have gotten rid of some of the worst for people that way.


23 posted on 02/13/2006 12:49:53 AM PST by A CA Guy (God Bless America, God bless and keep safe our fighting men and women.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: DB

I think they might have a computer that puts the restore software in a partitioned drive and it is all infected.


24 posted on 02/13/2006 12:50:46 AM PST by A CA Guy (God Bless America, God bless and keep safe our fighting men and women.)
[ Post Reply | Private Reply | To 22 | View Replies]

To: A CA Guy

That makes sense. I hate when computer companies are so cheap that they stick the system backup in separate partition. That does you no good if the drive fails or otherwise gets compromised.


25 posted on 02/13/2006 12:54:30 AM PST by DB (©)
[ Post Reply | Private Reply | To 24 | View Replies]

To: MetalHeadConservative35
There have been several good responses on this thread (including the warning that the Master Boot Record on your drive might be infected, which would cause re-infection upon reboot even after you had formatted the primary partition).

But I'd like to address another angle: Are you sure you actually have the malware in question, or might you just be getting a false positive from your virus scanner? What are your "symptoms", if any, aside from the virus scanner raising a flag?

26 posted on 02/13/2006 12:55:43 AM PST by Ichneumon
[ Post Reply | Private Reply | To 1 | View Replies]

To: Ichneumon
adsheriff just pops up and installs itself even after ive deleted and uninstalled it,

i may have to just format all 3 hard drives..if that doesnt work..this machine is making a one-way-trip to the gun range...

27 posted on 02/13/2006 12:59:58 AM PST by MetalHeadConservative35 (Timeo Danaos et dona ferentes. (i fear the greeks even when they bring gifts))
[ Post Reply | Private Reply | To 26 | View Replies]

To: Havoc; MetalHeadConservative35
Have you tried replacing your MBR

Havoc, I agree with you that by process of elimination the MBR is a next place to look even though that is a real long shot as a source of the problem, but there is no indication that this program is anywhere that sophisticated:

"This is not a virus or a trojan. It is detected as a "potentially unwanted program." This is an anti-spyware application claiming to remove unwanted malicious spyware programs but requires paid registration before any issues found can be fixed or any many other features enabled (on access protections, etc.) It creates a shortcut in the Start Menu Startup folder to ensure it is launched and performs a scan at each system startup. In order to clean or delete any elements identified as threats, the software requires you purchase the full version."

The uninstall directions on their website are You can uninstall the program by clicking "Start->Programs->AdwareSheriff->Uninstall AdwareSheriff" menu item or use the "Start->Control Panel->Add/Remove Programs" capabilities.

It's hard to believe that this program immediately shows up after a reformat and a completely clean install. In other words, the install finishes, XP(this is XP, right?) asks if you want to activate and register, and right there or the very next boot, without doing anything else this program pops up. MetalHeadConservative35 is this the case, anf if so, have you ever used a dual-boot configuration? Another long shot, but that is all I can think of.

28 posted on 02/13/2006 1:01:14 AM PST by Northern Alliance
[ Post Reply | Private Reply | To 13 | View Replies]

To: Northern Alliance
im just gonna kill all 3 drives..ill do it tomorrow, its 4am and in a crappy mood,

thanks for the help

29 posted on 02/13/2006 1:08:31 AM PST by MetalHeadConservative35 (Timeo Danaos et dona ferentes. (i fear the greeks even when they bring gifts))
[ Post Reply | Private Reply | To 28 | View Replies]

To: MetalHeadConservative35
its 4am and in a crappy mood,

I don't blame you! Get some sleep and let us know how it goes tomorrow.

30 posted on 02/13/2006 1:12:03 AM PST by Northern Alliance
[ Post Reply | Private Reply | To 29 | View Replies]

To: MetalHeadConservative35

Ad sheriff is terrible. It's basically extortion. It highjacks your pc and holds it hostage, all under the guise of getting rid of ad ware. It even puts this ridiculous banner on your desktop, then alters your desktop security profile so that you can't change it readily.


31 posted on 02/13/2006 1:13:27 AM PST by kenth
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

Try the removal instructions here. (At your own risk and back up your registry!)

http://www.2-spyware.com/remove-spysheriff.html


32 posted on 02/13/2006 1:16:21 AM PST by idkfa
[ Post Reply | Private Reply | To 29 | View Replies]

To: Northern Alliance; MetalHeadConservative35

I am not really concerned over the program itself so much as by the behavior exhibited. But, I would agree that more information would be useful. At the same time, the drive apparently has already been reformatted. Replacing the MBR if there is any question doesn't take long and will rule that out as the problem. It also eliminates second guessing and diminishes the need for guessing in general.

No matter what something identifies itself as, I troubleshoot for the behavior, not the expected behavior. Things are not always what they advertise themselves to be.
:)



33 posted on 02/13/2006 1:18:05 AM PST by Havoc
[ Post Reply | Private Reply | To 28 | View Replies]

To: MetalHeadConservative35
its 4am and in a crappy mood

A little something to cheer you up....



I hope you're not a female FReeper.....
34 posted on 02/13/2006 1:18:21 AM PST by RandallFlagg (Roll your own cigarettes! You'll save $$$ and smoke less!(Magnetic bumper stickers-click my name)
[ Post Reply | Private Reply | To 29 | View Replies]

To: MetalHeadConservative35

Get your rest. If your tired and stressed that's always good medicine. If you need help tomorrow, you can IM me. I have the day off and no plans. Will be glad to help if I can.


35 posted on 02/13/2006 1:20:21 AM PST by Havoc
[ Post Reply | Private Reply | To 29 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-35 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson