How to remove SunshineSpy?
What is SunshineSpy?
The 26th of October, 2007 – a fine day for a new rogue anti-spyware program, called SunshineSpy. The name of the program is a way to add credibility by making people believe there is a company by the name of Sunshine, which there isn’t. SunshineSpy is a program in the vain of many other rogue security applications, that don’t fix any problems, but want money for making people think they have.
SunshineSpy is particularly annoying, since it hijacks your browser and changes your desktop. Other than that, it is exactly the same: it gets downloaded and installed manually and allows to run a scan, which produces a falsified report, trying to scare the user with numerous non-existent threats, which supposedly cannot be removed without buying the fake full version.
SunshineSpy changes the desktop into a black screen with a message saying "WARNING! YOUR PC IS INFECTED!" and more intimidation, plus two buttons, one saying "Clean My PC" and another saying "EXIT". If you press "Clean My PC", the desktop will be changed again into something that resembles the Blue Screen of Death, which has another button – "Recover System". Whichever button of the three you push, your browser’s start page will be changed to "https://secure.sunshinespy.com/".
The homepage of SunshineSpy is no different than any other rogue security program’s page: it has a warning that you are definately infected and it has praise from users (even though it is considerably too new to have any (all the feedback is from the USA, I guess the scammers didn’t know any other country)). The page doesn’t have a link leading to a "buy" section, instead, you get redirected to the latter upon getting your browser hijacked. The contacts part only has a form you can fill out, but no actual information.
Don’t download this bogus tool, don’t buy it, if you have it – remove it and block sunshinespy.com in your host files.
SunshineSpy is Extremely dangerous
SunshineSpy is a corrupt Anti-Spyware program SunshineSpy may spread via Trojans SunshineSpy may display fake security messages SunshineSpy may install additional spyware to your computer SunshineSpy may repair its files, spread or update by itself SunshineSpy violates your privacy and compromises your security
Manual SunshineSpy removal
Important Note: Although it is possible to manually remove SunshineSpy, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.
Stop these SunshineSpy processes:
Disable these SunshineSpy DLL files::
Remove these SunshineSpy Registry Entries:
Remove these SunshineSpy files:
SunshineSpy is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only SunshineSpy can help you to remove it after you download the trial version. As soon as the victim downloads SunshineSpy trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, SunshineSpy offers to buy the full version to fix these false errors. If the user agrees, SunshineSpy does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.
Some Rogue Anti-Spyware, such as SunshineSpy, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install SunshineSpy, which is another way for Rogue Anti-Spyware to spread itself.
Most of rogue Anti-Spyware, such as SunshineSpy, is nearly impossible to remove manually.
