These applications, though using different names, are essentially the same application being distributed through dubious methods through the Win32.TrojanDownloader.Small.awa dropper application (included in this update). Both applications function in the same way through attempting to deceive the user into purchasing the paid versions to remove content that does not exist on the user's system.

In our testing the applications display the detection of content they claim is installed on the system when none is present. The trial version does not allow for the removal of this content but you can get a three day trial version that will detect and offer to remove the content it finds. The applications claim to remove this content but when monitored, there are no changes to the system thus showing that nothing is actually removed though the applications claim to remove what is discovered.

Description:
SpywareNo! And SpySheriff claim to be antispyware solutions that offer free trials to the user that will detect content but not remove what is found (they also offer similar three day trial software that claims to remove the content discovered and shows that this was removed) before purchasing. Both applications detect and remove (as described) similar content that does not exist in an attempt to deceive the user into purchasing the software.

TAC (Threat Assessment Chart) Rating: 7.3* *Reported as a TAC of 7 in Ad-Aware

Behavior
- Program masks as doing one thing, but does another 1.8 points

As described, the software claims to be antispyware solutions that will detect and remove content discovered. The content detected is not present on the system and though they claim to uninstall the content detected (in the three day trial version) nothing is actually removed though the software claims that the removal was successful.

Privacy
- Privacy policy not disclosed to the user prior to installation 0.8 points

Neither application nor website contains a privacy policy which is (of course) not displayed or available to the user prior to installation of the software. This rises to the level of a moderate issue when the installation is happening through the use of an advertising dropper to distribute the software.

Distribution
- License terms are intentionally difficult to read 0.8
- Intentionally hidden (stealth) install and/or clear evidence of intention 1.8
- Bundled with 3rd party software and installation is not disclosed to the user 1.8

The use of an advertising dropper causes the software to be installed on the user's system without notice and/or consent by the user. Also a severe issue is in how the advertising dropper is installed that distributes both applications. Installation of the dropper occurs by simply visiting the websites it is served from (for security these sites will not be published here). This is a force install to the user's system, happens without the user's knowledge in secret (Stealth), and is, by default, not disclosed to the user that the software is being installed. This shows a clear intent to install the software through deceptive means.

Removal
- no issues discovered 0.0

Once the SpywareNo! And SpySherifff applications are installed, they can be uninstalled using the add/remove programs feature in Windows and the uninstallers work correctly. Further installations of the applications (as reported) are not initiated by these applications, but through the original application dropper (Win32.TrojanDownloader.Small.awa) that first installed them if it is not removed properly.

Integration
- Causes unnecessary load on the computer 0.3 points

These applications use 44 megs of memory when operating and are deemed to be an unnecessary load on the user' s computer due to the fact that they were installed without the user' s knowledge and/or consent. In other words, the user did not request or purposely install them on their system.

Ignoring the detection in Ad-Aware
For those who use Ad-Aware and have installed these products on their system purposely, simply add the SpywareNo! Family to your ignore list when presented by the results after performing a scan and they will be ignored during further scans of the system.

Updating Ad-Aware SE
Open Ad-Aware and then use the "Check for updates now" link in the main status window. This will download and install the new definition file without the need to make any further adjustments.