Warning: This Site Gives False Info.......

Upon running the Clean-Up fix as told to, I now have a system that has been completely taken over
by some one who has name themselves Owner-Operator......and I am denied complete access to open
a single program......I want to warn everybody on this site, it is my belief that these are the writers
of malware such as Spy-Sheriff and other false-fixes like Clean-up and if there is anybody who knows any
different, I sure would like to hear about it.

Maxx,

What "Clean-Up fix" did you run? Since you only have 1 post, then I find it unlikely anyone told you to do anything to your system. If you tried to do a fix by yourself then you may have made a mistake which resulted in system problems.

This site is full of dedicated volunteers who help salvage people's computers from the brink of unusability....out of sheer kindness I might add. This site has provided comfort and relief to countless frustrated PC users and your remarks about this site are unwarranted.

If you have a legitimite problem that is related to self-help material on this site then please describe what you did, provide a link to the info you used for the fix, and we will help you get your computer back to normal.

If you are on this forum with malicious intent, then please leave.

Regards,

Hear Hear!!
I shall second harry 83!
This is a fantastic site!.. and dont let any say different!.. all thse sites SWI, Castle Cops , are really phenomenal!

I must say that I think you are sadly mistaken...........
I was attemtping to follow the the very steps that grinzley posted to do..........
I downloaded the Clean-up program from the link he had posted........
Then I had a complete melt down........I really think he IS Spy-Sheriff........
And he gets off on screwing people........for FREE!
Now if I am the one whos wrong, I appollogize in advance. All I know is that is my
experience........

If you followed self-help tutorial/pinned instructions, all links & references there are legitimate & safe. Tools & programs there are recommended on MANY pc help sites, not just this one. It is much more likely that something "piggy-backed" onto your system or infected you at about the same time and you unfortunately didn't get to Grinler's always helpful/insiteful steps for cleaning BEFORE the malware was able to set up shop as "Owner-Operator" of your system. Just out of curiosity, do you surf the net with a user account with Administrative or Limited rights?

Edited by buttoni, 11 June 2006 - 10:21 AM.

I downloaded the Clean-up program from the link he had posted........
Then I had a complete melt down........I really think he IS Spy-Sheriff........

So what you're saying is you were following the self-help tutorial for Spy Sheriff and after fllowing those steps you no longer have administrator access to your computer? Please gives us specifics about the problem (so we can help you) instead of accusing BC of being responsible for your problems...

Hello maxx63

Sounds like something occurred to change things but it was not the result of performing any of the steps in the self-help tutorials.

Exactly what self-help link you were using and what clean up program did you download and run?

Also, Owner-Operator folders are automatically created when installing Win XP and can be found in Documents & Settings along with All Users, Default User, etc. You may never now they are there unless you go into that folder to look. How are you trying to log on?

Maxx63

A few short months ago,i had a laptop that was nothing more than on its way to the little laptop heaven. I decided, reluctantly, to try one of these help forums to see if i anything could come from it. After asking numerous questions before i did anything,the very pleasant volunteers here helped fix my problems. Now i have a laptop running like an Aston Martin and security that even Fort Knox would envy.
The point is, everyone on here is only here to help. If you are not sure of anything,then ask before you do anything. If you look only a few posts away,i posted a question about about an anti-malware product, not because i dont know what im doing but because i think its best to ask before trying anything regardless of computer knowledge.

Im sure whatever issues you have with your system, they can be resolved here. I now like to give any help and advice here that i can. It is through sites like Bleeping Computer that we can fight against malware and help each other with our PC problems. If you feel it best to take your PC to a so called specialist (and in my opinion, i know of alot that are not) and let them look for $100 an hour then that is up to you,but you wont learn or get the advice you get here.

Maxx, repost with your exact problem and what guide you followed and everyone here will help you sort it.

B........I surf with admin. status..........or did.......now I can't even acess any of MY files/programs...........
The only way I am able get on line now is by setting up another admin. name. But, there is still no access
to any files/programs.......

H.......I googled 'Spy-Sheriff'and BC comes up as having tutorials on its removal.........I was atempting
to follow Grinzleys advise, step by step, and when in safe mode, I ran the 'Clean-Up' program (downloaded
from the link he had provided) I am now experiencing and continue to experience a total system lock-out,
save for being able to access the Net, but can not, as I already stated, download any programs which
may be able to restore my system. I was able to go to 'Restore' to restore my system to an earlier
date, but that was blocked as well. You can read for yourself his tutorial on this site, but I have noticed
his procedure has changed from what was posted at the time I accessed it.
But, in a nut-shell, the steps were to start up in safemode, run the Clean-Up, then the Ewido....etc.....
I never made ti to ewido because the clean-up program not only cleaned-up, but cleaned my out of my
system! lol
Look, sorry for the crass remarks ealier, but how the hell do you expect me to feel.......?

So this is the tutorial you used?

How to Remove SpySheriff and AntiSpylab?

It was posted on May 11th and I don't think it has changed since then.

Are you saying that after you downloaded and ran SmitFraudFix, this all happened?

I justed pulled the hard copy of the steps I followed..........They are dated May 3rd.
How to remove the Spysheriff..........
Step one: print out these instructions.......check
Step two: download and install 'Clean-Up' but do not run it yet........(here is where the link for the 'clean-up'
is provided)........check
Step three: download and install and update Ewido security suite (there is another link here for that)
launch Ewido, click to update, click start, after updates are installed, exit.........check
Step four: Reboot into safemode, open 'Clean-Up', put a check mark next to the following
Empty Recycle bin
Delete Cookies
Delete Prefetch Files
Scan local drives for temporary files
Cleanup! all users
click okay, Click the Cleanup! button.............check
Then, whalaa! You now have a complete lock-out of your system!
There are many more steps to follow but obviously, you don't need to worry about them because
you no longer have a system to worry about anyways.......check!

So, as of todays date, the insructions have completely changed from the date May 3rd.
Now you are told to download Smitfraud........this was never mentioned when I accessed the site
on the 3rd of May. So what does the Smit thing do? Make your system physically blow-up? (tongue-in-cheek)!

Maxx63 your attitude is APPALING tho I fully can understand you being poed I have to say these people on this site and this forum have the best knowledge and clear imformation about the world of cps...... and they are willing and ABLE to help and has offered too..... STOP being a child and get on ur knees as a men and ask for help!!!!! Graveangle and Harry83 has your best interest in mind...But should NOT waste there Time nor MINDS on some one who spitefull as you.. come on it easy just say ""help please"

this was never mentioned when I accessed the site
on the 3rd of May.

So you've had this problem for 39 days?? I find it hard to believe you printed out instructions on the 3rd because you had SpywareSheriff and then waited until just now to use the instructions...Either you sat on SpywareSheriff for somewhere around 39 days or you've had this current problem for about that long...hrrmm quite the logical conundrum...

So go to this link and tell me if this is the tool you used:

CleanUp!

Also are you able to download and run a simple program like HJT? If so then I suggest posting a HijackThis log in the HJT Logs and Analysis Forum. Here is a link to that Forum:

HJT Forum

Please follow the preparation directions and try not to alter your system until you receive help from one of our HJT Team Members. The preparation directions are found at the following link:

Prep Guide for Posting HJT Logs

Please note: Do not try to fix any problems with HJT yourself. This is an advanced tool and requires expert analysis.

If you still have SpySheriff on your computer then follow the removal instructions posted here:

SpywareSheriff Removal

But I guess you won't be able to do that since you have no access to anything...

Are all of the files on your system encrypted?? You may have been infected with a ransomware virus...If so, try and open one of them and tell me what it says... Do you have any browser redirection? We need more information abut what's actually happening with your system...

I justed pulled the hard copy of the steps I followed..........They are dated May 3rd. How to remove the Spysheriff...So, as of todays date, the insructions have completely changed from the date May 3rd. Now you are told to download Smitfraud........this was never mentioned when I accessed the site

That's because the self-help topic with the smitfraudfix you are referring to was created by Grinler on May 11 2006. It does not include CleanUP and is actually titled "How To Remove Spyware Sheriff And Antispylab" which targets spywaresheriff.exe. Since you downloaded instructions a least a week before he posted this fix, it cannot be the same self-help guide that you used.

I googled 'Spy-Sheriff'and BC comes up as having tutorials on its removal.........I was atempting to follow Grinzleys advise, step by step...

It appears your google search led you to an older but different self-help tutorial titled "How to remove the Spysheriff" which targets SpySheriff.exe. This self-help guide was created by Grinler on Jun 22 2005 and does include downloading and using CleanUp.

Although the names are similar, spywaresheriff.exe and SpySheriff.exe are actually two different infections and thus, they are dealth with differently. The "procedure" did not change. Nothing was added or removed. We we are talking about two different tutorials, each with its own set of instructions for two different infections. You apparently used the incorrect tutorial for your problem as a result of your search and not asking anyone here if this was the appropriate fix for your malware problem.

So what does the Smit thing do? Make your system physically blow-up?

The smitfraudfix tool was created by a malware removal expert specifically for newer smitfraud infections. It only targets and removes bad files related to these infections. It is safe, works well and is recommended by the vast majority of experts at forums like this as the appropriate fix tool to use.

I understand your frustration but airing it here will not resolve your current problem. Please provide as much information as you can so that we may attempt to help you.