SpySheriff

SpySheriff is a trojan malware that disguises itself as antivirus software. Its primary purpose is to deceive the user into buying the program by creating a number of false security alerts.

Why it Sucked

 * 1) The software is particularly difficult to remove unless the infected user is experienced has genuine antivirus software or has a rescue disk.
 * 2) In an attempt to scare the user, it detects a number of false threats with cryptic names.
 * 3) Attempting to remove it will result in it reinstalling itself.
 * 4) SpySheriff replaces the desktop background with an image resembling a BSoD, tricking the user into thinking their machine is infected with a bunch of spyware.
 * 5) Using Add or Remove Programs in Control Panel to remove SpySheriff can result in the computer failing to remove it or in some cases cause an unexpected restart.
 * 6) The program blocks access to the internet, with spy-sheriff.com being the only accessible website. To add insult to injury, it can only be opened through the malware's control panel.
 * 7) The program blocks System Restore by causing the calendar and restore points to not load. Thankfully, you can undo the previous restore operation, after which your system will restore itself, allowing you to easily remove SpySheriff.
 * 8) SpySheriff can disable any genuine antivirus programs by ending their processes upon detection. Some programs can evade this, however.
 * 9) The Task Manager and Registry Editor will not load to prevent the user from removing its registry entries. One workaround is to rename the "regedit" and "taskmgr" executable files.