Remove My Security Shield rogue antispyware
My Security Shield is a fake spyware remover that implements its parasitic activity on computers with the purpose to make victims pay some money for its registration. My Security Shield is replacing Security Master AV rogue antispyware. It is hardly perceptible during intrusion so even reliable antivirus software and firewall might not succeed in detecting the malicious thing entering. My Security Shield runs fake scanners and displays popup alerts that notify the user about the supposed infections found. Considering the fact that all such warnings and scan reports are bogus, it’s not recommended to click them (except the close button). Otherwise you will be forced into purchasing My Security Shield licensed version. Unless you enjoy wasting your money on harmful software you don’t need, make sure you perform urgent removal of My Security Shield fake antivirus. It is a tricky tool being applied for money harvesting objectives. The tips listed below will aid you in getting rid of My Security Shield malware.
How to detect and remove My Security Shield rogue antispyware
To ensure My Security Shield accurate detection and efficient removal, we strongly recommend using the trusted remover with free scanner.
Download free My Security Shield virus scanner
Save the installer to your hard drive and launch now.
If you intend to perform My Security Shield manual removal, you need to possess some computer troubleshooting skills. This will require stopping the malignant processes, deleting malware files and registry keys.
Terminate My Security Shield processes:
Kernel32.exe
MS345d_2129.exe
Delete My Security Shield files and folders:
%Documents and Settings%\All Users\Application Data\345d567\4475.mof
%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
%Documents and Settings%\All Users\Application Data\345d567\MS345d_2129.exe
%Documents and Settings%\All Users\Application Data\345d567\MSS.ico
%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
%Documents and Settings%\All Users\Application Data\345d567\BackUp\
%Documents and Settings%\All Users\Application Data\345d567\MSSSys\
%Documents and Settings%\All Users\Application Data\345d567\MSSSys\vd952342.bd
%Documents and Settings%\All Users\Application Data\345d567\Quarantine Item\
%Documents and Settings%\All Users\Application Data\MSHBXRCOBWS\
%Documents and Settings%\All Users\Application Data\MSHBXRCOBWS\MSJYQMS.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk
%UserProfile%\Application Data\My Security Shield\
%UserProfile%\Application Data\My Security Shield\cookies.sqlite
%UserProfile%\Application Data\My Security Shield\Instructions.ini
%UserProfile%\Desktop\My Security Shield.lnk
%UserProfile%\Recent\cid.drv
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\delfile.sys
%UserProfile%\Recent\fan.dll
%UserProfile%\Recent\grid.sys
%UserProfile%\Recent\kernel32.exe
%UserProfile%\Recent\kernel32.sys
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\SICKBOY.drv
%UserProfile%\Recent\std.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\My Security Shield.lnk
%UserProfile%\Start Menu\Programs\My Security Shield.lnk
Remove My Security Shield registry keys:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=2129&q={searchTerms}”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=2129&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “control/7.02129″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “My Security Shield”
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=2129&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
In order to avoid system damage, we advise using the automatic tool which will do the removal job for you.
Download My Security Shield Removal Tool
Important Notice
This site is by no means related to My Security Shield, nor is it affiliated with or owned by My Security Shield creators. Any information available on antivirustech.com is not to be in any way associated with distribution of this infection.
Our primary and sole mission is to instruct our visitors in the issues of My Security Shield detection and manual/automated removal methods.
Please bear in mind that manual removal of this malware is not ultimately effective because the corrupted file names can get repeatedly modified or be hidden. Therefore it’s recommended to use the automatic solution to ensure My Security Shield removal and eliminate possible risks that may arise due to improper registry and file system manipulations.
The free virus scanner provided on our website is meant for detection only. If you choose to use the tool for malware removal, you will need to buy its full version.
Computer acting up?
