How to remove My Security Shield

Home » Rogue Anti-Spyware » My Security Shield Repair and protect your computer easily. Download My Security Shield removal tool

My Security Shield description

My Security Shield is a misleading application which can also be found in a different name, such as Virus Doctor. It comes along with the download and installs itself automatically. The main goal of this rogue program is to pilfer money from unwary users. As other rogue anti-spyware applications My Security Shield is promoted and installed through the use of trojan. Malware is very persuasive and will cause you annoyances on computer.

This dubious program pretends being legitimate computer security tool and scans user’s PC. It also displays rogue warning messages and various security alerts:

Warning! Access conflict detected!
An unidentified program is trying to access system process address space.
Process Name: AllowedForm
Location: C:\Windows\…\notepad.exe

Warning! Identity theft attempt detected

Memory access problem
WindowsErrorForm has encountered a problem at address 0×1FC408.
We are sorry for the inconvenience.
If you see this error again, operational information can be irrevocably lost.

Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals user’s passwords.

This is a fraud. Do not believe any information it shows because it is malicious and fraudulent. If you noticed your computer works slower or your desktop is flooded with various pop-ups, or your browser is redirected to counterfeit web pages, you are definitely infected with malware. You have to ignore all security alerts and fake warning messages but choose decent anti-spyware application and delete My Security Shield immediately.

How to get rid of My Security Shield

This infection can be removed using Spyware Doctor.

Download does not start? Try a mirror download here
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from My Security Shield and the latest internet security threats. If your computer is infected with My Security Shield we strongly recommend automatic spyware scanner.

How to manually remove My Security Shield

To get rid of spyware such as My Security Shield you need to remove processes, search and delete registry keys, DLL and other My Security Shield related files from your computer.

Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic My Security Shield remover.

1. Uninstall My Security Shield from Control Panel
   Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.
2. End these My Security Shield processes:
   kernel32.exe
   DBOLE.exe
   MS345d_2129.exe
   To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button.
3. Unregister My Security Shield DLL files:
   std.dll
   PE.dll
   fan.dll
   sqlite3.dll
   mozcrt19.dll
   To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll"
4. Delete My Security Shield registry entries: HKEY_CURRENT_USER\Software\3
   HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
   HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler
   HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
   HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129"
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"
   HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
   To open registry editor click Start > Run > type "regedit".
   Warning! Manual registry entries editing may cause damage to your system.
   Download Uniblue RegistryBooster 2010 to scan for registry errors.
5. Search and delete these My Security Shield related files:
   c:\Documents and Settings\All Users\Application Data\345d567\
   c:\Documents and Settings\All Users\Application Data\345d567\4475.mof
   c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
   c:\Documents and Settings\All Users\Application Data\345d567\MS345d_2129.exe
   c:\Documents and Settings\All Users\Application Data\345d567\MSS.ico
   c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
   c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
   c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\
   c:\Documents and Settings\All Users\Application Data\345d567\MSSSys\vd952342.bd
   c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Item\
   c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\
   c:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\MSJYQMS.cfg
   %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk
   %UserProfile%\Application Data\My Security Shield\
   %UserProfile%\Application Data\My Security Shield\cookies.sqlite
   %UserProfile%\Application Data\My Security Shield\Instructions.ini
   %UserProfile%\Desktop\My Security Shield.lnk
   %UserProfile%\Recent\cid.drv
   %UserProfile%\Recent\CLSV.tmp
   %UserProfile%\Recent\DBOLE.exe
   %UserProfile%\Recent\delfile.sys
   %UserProfile%\Recent\fan.dll
   %UserProfile%\Recent\grid.sys
   %UserProfile%\Recent\kernel32.exe
   %UserProfile%\Recent\kernel32.sys
   %UserProfile%\Recent\PE.dll
   %UserProfile%\Recent\PE.tmp
   %UserProfile%\Recent\runddlkey.drv
   %UserProfile%\Recent\SICKBOY.drv
   %UserProfile%\Recent\std.dll
   %UserProfile%\Recent\tempdoc.tmp
   %UserProfile%\Recent\tjd.sys
   %UserProfile%\Start Menu\My Security Shield.lnk
   %UserProfile%\Start Menu\Programs\My Security Shield.lnk