Security Shield is a rogue anti-spyware program from the same family as System Tool and Security Tool. Once installed, it will supposedly scan your computer for spyware, adware, trojans and other malware. Of course, it will find numerous infections and then will prompt you to pay for a full version of Security Shield in order to remove non-existent infections. This fake security program will also display fake alerts and notifications stating that your computer in under attack or that your sensitive information can be stolen. This program is a scam. If your computer is infected with this malware then you should use our removal instructions below to remove Security Shield and any related malware either manually or with an automatic removal tool.
While SecurityShield is running, it will block certain programs and display a fake error message. The fake message reads:
Security Shield
"cmd.exe" is infected with "Worm.Win32.Autorun.bnb". Do you want to register your copy and remove all threats now?
Security Shield also hijacks Dekstop and Web browsers to further scare you into thinking that your computer is infected or has other problems, security issues. It may redirect you to misleading and malicious web sites and even display porn pop-ups on your screen. The fake alerts and notifications read:
Security Shield Warning
Spyware.IEMonster activity detected. This form of spyware attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other commonly used programs. Click here to immediately remove it with Security Shield.
Security Shield Warning
Intercepting malicious software that may violate your privacy and harm your computer has been detected. Click here to remove now with Security Shield.
Security Shield Warning
Some of the important system files on your PC were modified by malicious software. It may cause system crashes and data losses.
Click here to prevent non-authorized changes and remove threats (Recommended)
Security Shield is a scareware that uses misleading methods to trick users into purchasing this absolutely useless program. If you have purchased it then contact tour credit card company and dispute the charges. Then use our removal instructions to remove Security Shield and related malware. We strongly recommend you to use an automatic removal because this rogue program can come bundled with other malware.
You can also use this code to register Security Shield: 64C665BE-4DE7-423B-A6B6-BC0172B25DF2
Security Shield 2012
There is a new version of security shield. It goes with the year tag: security shield 2011, security shield 2012. Basically it is the same rogue antispyware. The work principle is no different - security shield installs to the victims computer without explicit consent from the user. It can install through the fake video codex, trojans of fake software updates. After the install Security Shield 2012 disables your current antivirus or antispyware. After this step fake antispyware program will start his own scan process. All this scan process is fake, after the scan Security shield 2012 will find a lot of viruses on your computer and will ask you to pay money to remove them. You need to know that all this is fake, the viruses and infections it finds - do not exist.
Removal process of Security Shield 2012 is a hard task. We even do not recommend to use manual removal instructions below, as it regenerates again. Some anti-spyware vendors developed special rules to detect and remove security shield, but this virus knows how mutate, so it is really difficult task even for automated solutions. Anyway there are some programs which dedicates their time to detect and renove security shield. We recommend using malware bytes anti-malware or SpyHunter.
Related files:
[random].exe
Security Shield properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Security Shield you agree to our
privacy policy and
agreement of use.
Security Shield manual removal:
Kill processes:
[random].exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[random]"
Delete files:C:\\Documents and Settings\\[User]\\Local Settings\\Application Data\\[random].exe
Modern viruses are really hard to remove. They have random file names, random registry entries, they can immitale legal products and files.
Removal instructions sometimes can't Help to remove infection manually. Please take a look at our discussion where users like you share they experience in fighting the parasite:
this was windows vista but should work on others too??
Finally, It's off!
Finally its off!
start windows in safe mode
and do a system resstore to before you hade a security sheild virus
it worked for me!!!
WHO DOES THIS CRAP?!? And for WHAT????????????? STUPID, IGNORANT IDIOTS!
dam!! it is highly irritating
thanks
Please Help!!
Thanks
http://www.microsoft.com/security/scanner/en-us/default.aspx and I put in on a thumb drive. 2) I then rebooted my infected computer into Safe Mode by tapping F8 key when it starts to load. 3) I then went to My computer and double clicked the msert.exe program that was on the thumbdrive I transferred from the non-infected computer. That program found and removed this virus. 4) Just to be safe I then rebooted that laptop normally and ran another popular free anti-virus program called Ad-aware available from:
http://www.lavasoft.com/
and it found a lot more threats which I removed. There is now no indication of that nasty virus.
now I want to find this cat and kick the ........
I too was able to use Task Manager, and check the properties of each task, when I found the one that was installed and modified today (though it had a different name to Jamies) I was able to halt it; from there on, my real antivirus kicked back in (AVG) and quarantined the sucker!
Thanks again!
But now I have stopped all connection to the internet and am doing a whole scan of my pc. Lets just hope it works
Post Comment: