programfilesdir+spysheriffuninstall.exeprogramfilesdir+spysheriffspysheriff.exe
programfilesdir+spysheriffprocmon.dllheur003.dllheur002.dllheur001.dllprogramfilesdir+spysheriffiesecurity.dllheur000.dll
HKEY_CLASSES_ROOTclsid{202b0efd-2cb9-039b-2b11-a3579d6d56a3} HKEY_CLASSES_ROOTclsid{7c43e35c-a398-7c5f-b1ba-7e87073be150} HKEY_CLASSES_ROOTclsid{9cb4ce93-8cc7-9e03-1037-2dd837e3a52e} HKEY_CURRENT_USERsoftwarespysheriff HKEY_CURRENT_USERsoftwarespysheriffie security HKEY_CURRENT_USERsoftwarespysheriffie securitylockedlocations HKEY_CURRENT_USERsoftwarespysheriffprocess security HKEY_CURRENT_USERsoftwarespysheriffprocess securitypolicies HKEY_CURRENT_USERsoftwarespysheriffprocess securitypoliciesallowed HKEY_CURRENT_USERsoftwarespysheriffscan HKEY_CURRENT_USERsoftwarespysheriffsystem security