SpySheriff, also known as Brave Sentry, SpyAxe, SpywareSheriff, Pest Trap, SpyTrooper,[1][2] Spywareno, and MalwareAlarm,[3] is malware that pretends to be real anti-spyware program. SpySheriff tries to trick the user into buying the program by making false warnings and alerts.[4] It is very difficult to remove SpySheriff from computers,[5] since it hides its parts in "System Restore" folders. SpySheriff also blocks some parts of the computer's administrative tools. Like other rogue antivirus programs, SpySheriff asks the user to register when they click "Remove found threats". SpySheriff can be removed by real antivirus programs.


  1. "SpySheriff Technical Details". Symantec. Retrieved 2009-11-01.[permanent dead link]
  2. Vincentas (18 October 2012). "spysheriff.exe in SpyWareLoop.com". Spyware Loop. Archived from the original on 2016-01-18. Retrieved 27 July 2013.
  3. "SpywareNo!". Retrieved 2009-11-11.
  4. "Spyware tunnels in on Winamp flaw". Joris Evers, CNET News.com, February 6, 2006. Archived from the original on 2009-05-02. Retrieved 2009-11-01.
  5. "Top 10 rogue anti-spyware". Suze Turner, ZDNet, December 19, 2005. Archived from the original on 2009-07-27. Retrieved 2009-11-01.