|
Title: My Security Shield
Type: Rogue Antispyware
Remove My Security Shield. Removal instructions
Also known as: MySecurityShield
Severity scale:
 (72 / 100)
Once installed, the rogue program will install a variety of files on your computer that act as fake malware so that the program will find them while scanning. These files are: cid.drv, CLSV.tmp, DBOLE.exe, delfile.sys, fan.dll, grid.sys, kernel32.exe, kernel32.sys, PE.dll, PE.tmp, runddlkey.drv, SICKBOY.drv, std.dll, tempdoc.tmp, tjd.sys and other. All these files are located in %UserProfile%Recent folder. While My Security Shield is running, it will automatically start scanning your computer and then will state that there are many infected files that should be removed, but this can be done only with a full version of the program. You may also find that your computer starts to become slower. Furthermore, My Security Shield will constantly display fake security alerts stating that your computer is infected and that you should purchase the program immediately to protect your computer. The text of some of these alerts are: Warning! Virus detected Threat Detected: Trojan-PSW.VBS.Half Description: This is a VBScript-virus. It steals user's passwords. Memory access problem WindowsErrorForm has encountered a problem at address 0x1FC408. We are sorry for the inconvenience. If you see this error again, operational information can be irrevocably lost. As you can see, My Security Shield uses misleading methods to scare you into purhcasing the program. The removal guide below will walk you through removing the My Security Shield and any associated malware that may have been installed with it. You can remove this virus manually, but we strongly recommend you to use an automatic removal tool. Finally, if you have already purchased the bogus program then contact your credit card company and dispute the charges. Related files: 4475.mof, mozcrt19.dll, MS345d_2129.exe, MSS.ico, sqlite3.dll, vd952342.bd, MSJYQMS.cfg, My Security Shield.lnk, cookies.sqlite, Instructions.ini, cid.drv, CLSV.tmp, DBOLE.exe, delfile.sys, fan.dll, grid.sys, KERNEL32.exe, kernel32.sys, PE.dll, PE.tmp, runddlkey.drv, SICKBOY.drv, std.dll, tempdoc.tmp, tjd.sys My Security Shield properties: • Changes browser settings • Shows commercial adverts • Connects itself to the internet • Stays resident in background My Security Shield snapshot:  Automatic My Security Shield removal: 
Tested and Confirmed! STOPzilla removes My Security Shield (2010-08-05 02:17:50)
Tested and Confirmed! Malwarebytes Anti Malware removes My Security Shield (2010-08-05 02:17:50)
We are testing Spyware Doctor's efficiency at removing My Security Shield
(2012-02-08 19:06:07)
My Security Shield manual removal:Kill processes:MS345d_2129.exe Delete registry values: HKEY_CURRENT_USER\Software\3 HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF} HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}" HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}" HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%" HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield" HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}" HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no" Unregister DLLs: mozcrt19.dll sqlite3.dll Delete files: 4475.mof mozcrt19.dll MS345d_2129.exe MSS.ico sqlite3.dll vd952342.bd MSJYQMS.cfg My Security Shield.lnk cookies.sqlite Instructions.ini cid.drv CLSV.tmp DBOLE.exe delfile.sys fan.dll grid.sys kernel32.exe kernel32.sys PE.dll PE.tmp runddlkey.drv SICKBOY.drv std.dll tempdoc.tmp tjd.sys Delete directories: c:\Documents and Settings\All Users\Application Data\345d567\ c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\ %UserProfile%\Application Data\My Security Shield\ 
Information added: 2010-08-05 02:17:50
Information updated: 2012-02-08 16:28:52 Additional resources related to My Security Shield:Attention: If you know or you have a website or page about My Security Shield removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
Related discussions:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
it said that my PC is unprotected.
what the hell with this product? I don't know about this product....
When windows starts, click start, select programs, accessories, system tools, and then system restore. This should only take a few minutes. It completely removed Security shield from my computer. I hope it works for you. Good luck...
Post Comment: