Severity scale  
  (72/100)

My Security Shield. How to Remove? (Uninstall Guide)

removal by - -   Also known as MySecurityShield | Type: Rogue Antispyware
12
My Security Shield is a rogue anti-spyware program from the same family as Security Master AV and My Security Engine. Just like its predecessors, My Security Shield is promoted through the use of fake online scanners and other bogus websites or malware that displays fake security alerts on your computer. The scareware states that your PC is infected with spyware, adware and other viruses and that you should download and install My Security Shield in order to remove the infections. In reality, though, this is nothing more but a scam. And if you decide to install My Security Shield then it will make your computer almost unusable.

Once installed, the rogue program will install a variety of files on your computer that act as fake malware so that the program will find them while scanning. These files are: cid.drv, CLSV.tmp, DBOLE.exe, delfile.sys, fan.dll, grid.sys, kernel32.exe, kernel32.sys, PE.dll, PE.tmp, runddlkey.drv, SICKBOY.drv, std.dll, tempdoc.tmp, tjd.sys and other. All these files are located in %UserProfile%Recent folder.

While My Security Shield is running, it will automatically start scanning your computer and then will state that there are many infected files that should be removed, but this can be done only with a full version of the program. You may also find that your computer starts to become slower. Furthermore, My Security Shield will constantly display fake security alerts stating that your computer is infected and that you should purchase the program immediately to protect your computer. The text of some of these alerts are:


Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals user's passwords.


Memory access problem
WindowsErrorForm has encountered a problem at address 0x1FC408.
We are sorry for the inconvenience.
If you see this error again, operational information can be irrevocably lost.

As you can see, My Security Shield uses misleading methods to scare you into purhcasing the program. The removal guide below will walk you through removing the My Security Shield and any associated malware that may have been installed with it. You can remove this virus manually, but we strongly recommend you to use an automatic removal tool. Finally, if you have already purchased the bogus program then contact your credit card company and dispute the charges. Related files: 4475.mof, mozcrt19.dll, MS345d_2129.exe, MSS.ico, sqlite3.dll, My Security Shield.lnk, cookies.sqlite, fan.dll, kernel32.sys, std.dll

My Security Shield properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall My Security Shield. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall My Security Shield. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes My Security Shield (2010-08-05 02:17:50)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes My Security Shield (2010-08-05 02:17:50)
SpyHunter
We are testing SpyHunter's efficiency (2012-05-30 13:25)
STOPzilla
Tested and Confirmed! STOPzilla removes My Security Shield (2010-08-05 02:17:50)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes My Security Shield (2010-08-05 02:17:50)
Webroot SecureAnywhere AntiVirus
My Security Shield screenshot
My Security Shield snapshot

My Security Shield manual removal

Kill processes:
MS345d_2129.exe
Delete registry values:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
Unregister DLLs:
mozcrt19.dll
sqlite3.dll

Delete files:
4475.mof
mozcrt19.dll
MS345d_2129.exe
MSS.ico
sqlite3.dll
vd952342.bd
MSJYQMS.cfg
My Security Shield.lnk
cookies.sqlite
Instructions.ini
cid.drv
CLSV.tmp
DBOLE.exe
delfile.sys
fan.dll
grid.sys
kernel32.exe
kernel32.sys
PE.dll
PE.tmp
runddlkey.drv
SICKBOY.drv
std.dll
tempdoc.tmp
tjd.sys
Delete directories:
c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\
%UserProfile%\Application Data\My Security Shield\

Geolocation of My Security Shield

Map reveals the prevalence of My Security Shield. Countries and regions that have been affected the most are: United States and United Kingdom.

Information updated:

Comments on My Security Shield

1
0
Rick
Is there a legal action that can be taken again these malicious people?
0
0
Page
Żal mi tej strony
0
0
page
I had the same problem. If you use Windows 7 check for a repair disk. You have this if you had backed up your computer before this incident.
The disk will check for problems with your boot directory and registry. Let it run and follow the prompts as needed. Once the system has rebooted the program has been removed.
0
0
Idiot
Got the Security Shield and fell for it. A week after my purchase, every trace of the program disappeared. Well, except for the fact that someone in the Mideast now has my old debit card number and has attempted to use it. Luckily, it was caught by my financial institution. Now I have to get some ID insurance.
0
0
carmen
Im so confused. For some reason it inturrepted my virus ware, that I already had and now I dont know what to do!!!!!! I hate downloading things becuse im so worried now.....
0
0
kenedy
My Security Shield is a rogue anti-spyware program from the same family as Security Master AV and My Security Engine.
0
0
scum
its a bunch of asians who cant spell in english, they created this virus 100% i swear t god what smartarsefkermofos
im so furious, i need to fix my pc, someone help please.

fk this sht off.
0
0
dc
Jehanlyn awesome fix. whatever you do, do not use the spyware removal programs. they will load and detect, then tell you to buy in order to remove the virus. follow Jehanlyns directions, no money spent, computer restored. thanks again
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)