Aye, our little naughty venal Sheriff is at it again. 

Look at this terrifying screen (the url is masked as the site returns a backdoor with Trojans, etc.):

123123adfa

(Click to enlarge)

Links point to SpySheriff download.

When you download the program, you get this odd little install screen which points to a EULA at www.spy-sheriff.com/eula.php.  The EULA, which you have to manually enter in the address bar to actually see, is actually a EULA for a completely different program — some kind of stock photography/font program.

Eula12312

Running the scan alerts you to cookies being “severe privacy risks”.  Trying to remove these dastardly threats, of course,  requires a purchase.

Infection12309asdf

The irony is the program crashed when trying to do the purchase.

Buynow9adfa

 

Alex Eckelberry
(Thanks to Adam Thomas here at Sunbelt for discovering this one)

 

 

Get your free 30-day GFI LanGuard trial

Get immediate results. Identify where you’re vulnerable with your first scan on your first day of a 30-day trial. Take the necessary steps to fix all issues.