How to remove My Security Shield

Thursday, August 5th, 2010 at 5:23 am
Home » Rogue Antispyware » My Security Shield

My Security Shield description

My Security Shield is typical rogue anti-spyware. It’s a computer infection which uses deceptive methods to make its victims pay for using the program.

My Security Shield presents itself as a computer protection tool. It won’t shield a PC from viruses because MySecurityShield is a hoax. Do not install this program if you have a choice! My Security Shield is usually installed secretly by trojans. My Security Shield puts a bunch of harmless files during installation process and it later reports the same files as they were infections. The victim is then prompted to pay for deleting the fake threats.

My Security Shield is also able to imitate various security notifications. Do not trust My Security Shield and the warnings it loads. Here are some examples of the counterfeit alerts:

Warning! Access conflict detected!
An unidentified program is trying to access system process address space.
Process Name: AllowedForm
Location: C:\Windows\…\notepad.exe

Warning! Identity theft attempt detected
Memory access problem
WindowsErrorForm has encountered a problem at address 0×1FC408.
We are sorry for the inconvenience.
If you see this error again, operational information can be irrevocably lost.

Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals user’s passwords.

My Security Shield is a Rogue Antispyware software

How to manually remove My Security Shield

To remove My Security Shield spyware you must block My Security Shield sites, stop and remove processes, unregister DLL files, search and delete all other My Security Shield files and registry utility. Follow the My Security Shield detection and removal instructions below.

The most typical software removal method is to remove My Security Shield by using "Add or Remove Programs" service. However there may be hidden My Security Shield files, running processes and registries in your computer, so My Security Shield may recreate all other files after reboot.

My Security Shield manual removal instructions

Block My Security Shield sites:
www5.my-security-shield.com
makeptotect73.co.cc
secure1.protection-av.com
Read more how to block My Security Shield sites

Stop and remove My Security Shield processes:
DBOLE.exe
MS345d_2129.exe
Read more how to kill My Security Shield processes

Locate and delete My Security Shield registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
Read more how to delete My Security Shield registry entries
Download RegistryBooster 2010 to scan errors caused by My Security Shield

Search and unregister My Security Shield DLL libraries:
std.dll
PE.dll
fan.dll
sqlite3.dll
mozcrt19.dll
Read more how to unregister My Security Shield DLL files

Detect and delete other My Security Shield files:
c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\345d567\4475.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\MS345d_2129.exe
c:\Documents and Settings\All Users\Application Data\345d567\MSS.ico
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\
c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Item\
c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\
c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\MSJYQMS.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk
%UserProfile%\Application Data\My Security Shield\
%UserProfile%\Application Data\My Security Shield\cookies.sqlite
%UserProfile%\Application Data\My Security Shield\Instructions.ini
%UserProfile%\Desktop\My Security Shield.lnk
%UserProfile%\Recent\cid.drv
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\delfile.sys
%UserProfile%\Recent\fan.dll
%UserProfile%\Recent\grid.sys
%UserProfile%\Recent\kernel32.exe
%UserProfile%\Recent\kernel32.sys
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\SICKBOY.drv
%UserProfile%\Recent\std.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\My Security Shield.lnk
%UserProfile%\Start Menu\Programs\My Security Shield.lnk

We strongly recommend you to use spyware remover to track My Security Shield and automaticaly remove My Security Shield processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

5 Responses to

My Security Shield

  1. Paul Weibel

    I WANT THIS OFF MY COMPUTER NOW!

    Reply

    Luciana Reply:

    Please, feel free to use the manual removal guidelines posted right above the comments section. You can also run antispyware scan to delete this infection.

    Reply

  2. Carley

    Will this put more crap on my my computer i dont need cause i want this off my computer.

    Reply

  3. Arthur

    I can’t open Windows Task Manager….

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here