From Wiki-Security, the free encyclopedia of computer security
Security Shield is a rogue anti-malware program, which is closely related to Security Tool and System Tool. Like these other rogue applications, Security Shield originated in Russia, is totally malicious, and is nothing but a scam. Security Shield is just one variation on this same thing, changed just enough to allow the scam to keep going. Essentially, it's the name for a variation that began causing infections in December 2010. Do not willingly download or pay for Security Shield under any circumstances, since it is incapable of providing any security whatsoever.
Security Shield's Malware PatternsSecurity Shield infections begin with a Trojan. This Trojan can be hidden on malicious websites in seemingly ordinary downloads, but it can also be promoted through bogus links in spam, or on Facebook and Twitter. Once the Trojan has found a way onto your computer, it makes sure that Security Shield is downloaded. Then, Security Shield has a very common pattern of attack, with the goal of scaring you and holding your computer for ransom.
The following are the common characteristics of Security Shield:
- Security Shield starts whenever you start Windows.
- Security Shield claims to run virus scans and gives you lists of results that include huge numbers of viruses.
- If you try to delete the viruses, Security Shield will prompt you to buy the full version of its software.
- You get frequent warning messages that threats have been discovered, which can only be removed if you "register" your copy of the Security Shield software.
- When you try to open other applications, you get an error message from Security Shield, and the program is prevented from starting.
- Your computer runs unusually slowly, because of Security Shield consuming resources.
- You may see alerts and "nag" screens that apply one of the other names for the malware, instead of the name Security Shield.
As frustrating as it is to have something like Security Shield impairing your ability to use your computer, remember that you do not have to give up your money to the people who are behind the scam. Also, paying them does no good; it does not make Security Shield leave you alone, and it does not unlock any functionality, since there is not any to unlock. Contrary to what its creators may want you to believe, you are not stuck, you don't have to do what they want, and you can get your computer back.
To check your computer for Security Shield, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Security Shield and other threats. If you detect the presence of Security Shield on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Security Shield.
Detection of Security Shield (Recommended)
Security Shield is difficult to detect and remove. Security Shield is not likely to be removed through a convenient "uninstall" feature. Security Shield, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Security Shield and other spyware, adware, trojans and viruses on your computer.
Run a Security Shield scan/check to successfully detect all Security Shield files with the SpyHunter Spyware Detection Tool. If you wish to remove Security Shield, you can either purchase the SpyHunter spyware removal tool to remove Security Shield or follow the Security Shield manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with Security Shield. Security Shield can come bundled with shareware or other downloadable software.
Another method of distributing Security Shield involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Security Shield on your system. Security Shield installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with Security Shield, use this SpyHunter Spyware dectection tool to detect Security Shield and other common Spyware infections. After detection of Security Shield, the next advised step is to remove Security Shield with the purchase of the SpyHunter Spyware removal tool.
Security Shield may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Security Shield from your computer.
Remedies and Prevention
Security Shield, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Security Shield along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example Security Shield, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Security Shield and other types of spyware.
Remove Security Shield manually
Another method to remove Security Shield is to manually delete Security Shield files in your system. Detect and remove the following Security Shield files:
- c:\Documents and Settings\[USERNAME]\Local Settings\Application Data\[RANDOM CHARACTERS].exe
- %LOCALAPPDATA%\ 6323257655.exe
- %LOCALAPPDATA%\ 246950008.exe
- %LOCALAPPDATA%\ 663846548.exe
- %LOCALAPPDATA%\ 595230097.exe
- %UserProfile%\AppData\Local\[RANDOM CHARACTERS].exe
- %UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe
- %AppData%\Microsoft\Windows\Start Menu\Programs\Security Shield.lnk
- %UserProfile%\Start Menu\Programs\Security Shield.lnk
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM CHARACTERS]"
If you believe your computer is infected with spyware,
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows