A new Spysheriff clone is on the loose — MrAntiSpy.
Creatively, they ripped off the Mr. Clean logo. Anyone with contacts at Procter and Gamble?
We can see in their satisfaction guarantee their relationship to Spysheriff:
One interesting aspect about this rogue is the owner in the whois records — the same one as procounter(dot)biz, which has been running malware files via vxgame-related sites last year and part of the Cool.WebSearch world since 2002. Nice bunch of folks, eh?
Patrick Jordan and Alex Eckelberry
(Credit to PIRT handler Nosirrah for the tip).