How to remove My Security Shield
Thursday, August 5th, 2010 at 5:23 amHome » Rogue Antispyware » My Security Shield
My Security Shield description
My Security Shield is typical rogue anti-spyware. It’s a computer infection which uses deceptive methods to make its victims pay for using the program.
My Security Shield presents itself as a computer protection tool. It won’t shield a PC from viruses because MySecurityShield is a hoax. Do not install this program if you have a choice! My Security Shield is usually installed secretly by trojans. My Security Shield puts a bunch of harmless files during installation process and it later reports the same files as they were infections. The victim is then prompted to pay for deleting the fake threats.
My Security Shield is also able to imitate various security notifications. Do not trust My Security Shield and the warnings it loads. Here are some examples of the counterfeit alerts:
Warning! Access conflict detected!
An unidentified program is trying to access system process address space.
Process Name: AllowedForm
Location: C:\Windows\…\notepad.exe
Warning! Identity theft attempt detected
Memory access problem
WindowsErrorForm has encountered a problem at address 0×1FC408.
We are sorry for the inconvenience.
If you see this error again, operational information can be irrevocably lost.
Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals user’s passwords.
My Security Shield is a Rogue Antispyware software
How to manually remove My Security Shield
To remove My Security Shield spyware you must block My Security Shield sites, stop and remove processes, unregister DLL files, search and delete all other My Security Shield files and registry utility. Follow the My Security Shield detection and removal instructions below.
The most typical software removal method is to remove My Security Shield by using "Add or Remove Programs" service. However there may be hidden My Security Shield files, running processes and registries in your computer, so My Security Shield may recreate all other files after reboot.
My Security Shield manual removal instructions
Block My Security Shield sites:
www5.my-security-shield.com
makeptotect73.co.cc
secure1.protection-av.com
Read more how to block My Security Shield sites
Stop and remove My Security Shield processes:
DBOLE.exe
MS345d_2129.exe
Read more how to kill My Security Shield processes
Locate and delete My Security Shield registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
Read more how to delete My Security Shield registry entries
Download RegistryBooster 2010 to scan errors caused by My Security Shield
Search and unregister My Security Shield DLL libraries:
std.dll
PE.dll
fan.dll
sqlite3.dll
mozcrt19.dll
Read more how to unregister My Security Shield DLL files
Detect and delete other My Security Shield files:
c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\345d567\4475.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\MS345d_2129.exe
c:\Documents and Settings\All Users\Application Data\345d567\MSS.ico
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\
c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Item\
c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\
c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\MSJYQMS.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk
%UserProfile%\Application Data\My Security Shield\
%UserProfile%\Application Data\My Security Shield\cookies.sqlite
%UserProfile%\Application Data\My Security Shield\Instructions.ini
%UserProfile%\Desktop\My Security Shield.lnk
%UserProfile%\Recent\cid.drv
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\delfile.sys
%UserProfile%\Recent\fan.dll
%UserProfile%\Recent\grid.sys
%UserProfile%\Recent\kernel32.exe
%UserProfile%\Recent\kernel32.sys
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\SICKBOY.drv
%UserProfile%\Recent\std.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\My Security Shield.lnk
%UserProfile%\Start Menu\Programs\My Security Shield.lnk
We strongly recommend you to use spyware remover to track My Security Shield and automaticaly remove My Security Shield processes, registries and files as well as other spyware threats.



September 6th, 2010 at 10:18 am
I WANT THIS OFF MY COMPUTER NOW!
Reply
Luciana Reply:
September 7th, 2010 at 4:26 am
Please, feel free to use the manual removal guidelines posted right above the comments section. You can also run antispyware scan to delete this infection.
Reply
September 16th, 2010 at 6:16 pm
Will this put more crap on my my computer i dont need cause i want this off my computer.
Reply
September 22nd, 2010 at 8:58 am
I can’t open Windows Task Manager….
Reply