My Security Shield Removal Process (remove MySecurityShield)

Protect Yourself from My Security Shield

- Remove rogue anti-spyware/anti-virus programs
- Prevent trojans, hijackers & other malware infections
- Use spyware helpdesk to resolve pesky malware

Start Your Scan Now to Detect My Security Shield

My Security Shield

My Security Shield is a fake spyware removal program. My Security Shield may look like it is capable of detecting and removing parasites including spyware and malware but it is completely unable to do so. My Security Shield can be very deceptive in the way that it attempts to alert computer users through popup alerts and bogus system scan results. My Security Shield should never be used or purchased for any reason. It is best to rid the computer of My Security Shield before it is able to cause damage or edit the system registry.

The fake error message is usually displayed by My Security Shield:

Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals user’s passwords.
Memory access problem
WindowsErrorForm has encountered a problem at address 0×1FC408.
We are sorry for the inconvenience.
If you see this error again, operational information can be irrevocably lost.

Are you getting popups from My Security Shield? Have you identified that you have My Security Shield installed on your computer? Do you wish to remove My Security Shield completely from your computer?

Why should you remove My Security Shield?

If My Security Shield resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that My Security Shield may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking My Security Shield removal process.

How can you manually remove My Security Shield

Manual removal of My Security Shield may not be for everyone. Each manual My Security Shield removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic My Security Shield removal process.

My Security Shield can be removed manually by following the steps below.

1. With all programs closed, click the Start Menu and go to the Control Panel.
2. Locate the Add/Remove Programs icon and double click it.
3. Locate My Security Shield in the list of programs. If you find it, select it and remove it. If you cannot find My Security Shield, you can continue to step 5.
4. Restart your computer.
5. Close all open programs and windows on your desktop.
6. Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
7. Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.
   HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}

   HKEY_CLASSES_ROOT\MS345d_2129.DocHostUIHandler

   HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

   HKEY_CURRENT_USER\Software\3

   HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"

   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "control/7.02129"

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"

   HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

8. You may need to return to this removal process for removing My Security Shield. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.

   Image 1. Bookmark PCHubs removal process

   

9. Delete all of the following files that are associated with My Security Shield from your computer.

   %UserProfile%\Application Data\My Security Shield\

   %UserProfile%\Application Data\My Security Shield\cookies.sqlite

   %UserProfile%\Application Data\My Security Shield\Instructions.ini

   %UserProfile%\Recent\cid.drv

   %UserProfile%\Recent\CLSV.tmp

   %UserProfile%\Recent\DBOLE.exe

   %UserProfile%\Recent\delfile.sys

   %UserProfile%\Recent\fan.dll

   %UserProfile%\Recent\grid.sys

   %UserProfile%\Recent\kernel32.exe

   %UserProfile%\Recent\kernel32.sys

   %UserProfile%\Recent\PE.dll

   %UserProfile%\Recent\PE.tmp

   %UserProfile%\Recent\runddlkey.drv

   %UserProfile%\Recent\SICKBOY.drv

   %UserProfile%\Recent\std.dll

   %UserProfile%\Recent\tempdoc.tmp

   %UserProfile%\Recent\tjd.sys

   C:\Documents and Settings\All Users\Application Data\345d567\

   C:\Documents and Settings\All Users\Application Data\345d567\4475.mof

   C:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll

   C:\Documents and Settings\All Users\Application Data\345d567\MS345d_2129.exe

   C:\Documents and Settings\All Users\Application Data\345d567\MSS.ico

   C:\Documents and Settings\All Users\Application Data\345d567\MSSSys\vd952342.bd

   C:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll

   C:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\

   C:\Documents and Settings\All Users\Application Data\MSHBXRCOBWS\MSJYQMS.cfg

   If you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.

   If you have issues deleting any of the previously listed files that are associated with My Security Shield, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.

   Image 2. Select "Safe Mode with Networking"

   

10. After locating and deleting the previous files you must remove all directories associated with My Security Shield by going to the C:\ProgramFiles\My Security Shield folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.

11. Restart your computer. You do not need to boot into safe mode at this point. You should have removed My Security Shield completely from your computer. If you find that My Security Shield is still on your computer, you can repeat the steps again or go to the automatic My Security Shield removal process.