A new Spysheriff clone is on the loose — MrAntiSpy.
Creatively, they ripped off the Mr. Clean logo. Anyone with contacts at Procter and Gamble?
We can see in their satisfaction guarantee their relationship to Spysheriff:
One interesting aspect about this rogue is the owner in the whois records — the same one as procounter(dot)biz, which has been running malware files via vxgame-related sites last year and part of the Cool.WebSearch world since 2002. Nice bunch of folks, eh?
Stay away from these. The latest version of CounterSpy (or the CounterSpy 2.0 beta) should remove them just fine.
Patrick Jordan and Alex Eckelberry
(Credit to PIRT handler Nosirrah for the tip).