<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: How to Remove Winstall.exe / SpySheriff</title>
	<atom:link href="http://www.technibble.com/how-to-remove-winstallexe-spysheriff/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.technibble.com/how-to-remove-winstallexe-spysheriff/</link>
	<description>A Resource for Computer Repair Technicians &#38; to get PC tech support help.</description>
	<lastBuildDate>Fri, 12 Mar 2010 20:24:38 -0600</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Parso</title>
		<link>http://www.technibble.com/how-to-remove-winstallexe-spysheriff/comment-page-1/#comment-13072</link>
		<dc:creator>Parso</dc:creator>
		<pubDate>Thu, 04 Feb 2010 23:13:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.technibble.com/how-to-remove-winstallexe-spysheriff/#comment-13072</guid>
		<description>This &#039;infection&#039; sounds VERY similar to another infection called Internet Security 2010. Very annoying, it is.
My friend managed to open an email from a UPS delivery email saying that a package was &#039;held in transit&#039;. She is not that computer savvy and didn&#039;t realise what she was doing.
The virus pretty much tried to cripple Windows.
Before going to check out my friend&#039;s laptop, I watched Bryce&#039;s video podcast on how to remove a virus without using a virus scanner. Thanks to him it had all the information required to stop the virus in its tracks.
I didn&#039;t even use the Malwarebytes’ Anti-Malware software as I didn&#039;t know if it could be trusted either.
The first thing I did was check msconfig and deleted the reference in the Startup tab. Then went to System Restore and restored the laptop to about 5 days previous. It rebooted and the warnings signs all stopped! I went back into her Outlook Express and deleted the email that introduced the virus in the first place.
I then checked Windows/system32 for any new files that had been created that day and deleted them too.
I then gained access to the net and deleted all the file associations mentioned on this page (down the bottom)..http://remove-malware.net/how-to-remove-internet-security-2010-rogue-anti-spyware/
All is working fine now!
I would love any input/critisism from experts who have any opinions on the process I went through to stop this virus.
Cheers.</description>
		<content:encoded><![CDATA[<p>This &#8216;infection&#8217; sounds VERY similar to another infection called Internet Security 2010. Very annoying, it is.<br />
My friend managed to open an email from a UPS delivery email saying that a package was &#8216;held in transit&#8217;. She is not that computer savvy and didn&#8217;t realise what she was doing.<br />
The virus pretty much tried to cripple Windows.<br />
Before going to check out my friend&#8217;s laptop, I watched Bryce&#8217;s video podcast on how to remove a virus without using a virus scanner. Thanks to him it had all the information required to stop the virus in its tracks.<br />
I didn&#8217;t even use the Malwarebytes’ Anti-Malware software as I didn&#8217;t know if it could be trusted either.<br />
The first thing I did was check msconfig and deleted the reference in the Startup tab. Then went to System Restore and restored the laptop to about 5 days previous. It rebooted and the warnings signs all stopped! I went back into her Outlook Express and deleted the email that introduced the virus in the first place.<br />
I then checked Windows/system32 for any new files that had been created that day and deleted them too.<br />
I then gained access to the net and deleted all the file associations mentioned on this page (down the bottom)..http://remove-malware.net/how-to-remove-internet-security-2010-rogue-anti-spyware/<br />
All is working fine now!<br />
I would love any input/critisism from experts who have any opinions on the process I went through to stop this virus.<br />
Cheers.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: K Shear</title>
		<link>http://www.technibble.com/how-to-remove-winstallexe-spysheriff/comment-page-1/#comment-11968</link>
		<dc:creator>K Shear</dc:creator>
		<pubDate>Tue, 12 Jan 2010 01:42:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.technibble.com/how-to-remove-winstallexe-spysheriff/#comment-11968</guid>
		<description>Great thought I had a copy of this program already but it must have been deleted. As your instrustions stated the WINSTALL.EXE was gone.</description>
		<content:encoded><![CDATA[<p>Great thought I had a copy of this program already but it must have been deleted. As your instrustions stated the WINSTALL.EXE was gone.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jbrennan-mi</title>
		<link>http://www.technibble.com/how-to-remove-winstallexe-spysheriff/comment-page-1/#comment-7283</link>
		<dc:creator>jbrennan-mi</dc:creator>
		<pubDate>Mon, 04 May 2009 00:06:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.technibble.com/how-to-remove-winstallexe-spysheriff/#comment-7283</guid>
		<description>one of My favorite anti-malware programs is from a company called malwarebytes.org   mbam-setup works great in removing malware.</description>
		<content:encoded><![CDATA[<p>one of My favorite anti-malware programs is from a company called malwarebytes.org   mbam-setup works great in removing malware.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David</title>
		<link>http://www.technibble.com/how-to-remove-winstallexe-spysheriff/comment-page-1/#comment-594</link>
		<dc:creator>David</dc:creator>
		<pubDate>Fri, 28 Dec 2007 12:08:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.technibble.com/how-to-remove-winstallexe-spysheriff/#comment-594</guid>
		<description>superantispyware does this with one click.

google it</description>
		<content:encoded><![CDATA[<p>superantispyware does this with one click.</p>
<p>google it</p>
]]></content:encoded>
	</item>
</channel>
</rss>
