Security Shield Pro 2011 Removal Guide

Security Shield Pro 2011 is a fake antivirus program that cannot detect and remove any kind of virus, malware or trojan. However, Security Shield Pro 2011 pretends to be a legitimate antivirus which can protect computers from the attack malwares. Once Security Shield Pro 2011 is installed on the computer, it will start automatically when Windows boot. Then Security Shield Pro 2011 will do a fake scan on the computer and will definitely scare the user with pop ups which shows that the computer has been infected by a lot of malwares. Security Shield Pro 2011 will repeatedly shows the pop ups to urge the user to purchase the full version of Security Shield Pro 2011 so that to remove all the threats. However, Security Shield Pro 2011 cannot detect and remove any kind of virus, malware and trojan.

Security Shield Pro 2011 can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Security Shield Pro 2011 shown in the removal guide below. All files related to Security Shield Pro 2011 must be deleted.

Security Shield Pro 2011 should be removed immediately!

Security Shield Pro 2011 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = %UserProfile%\Application Data\[random].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = '%UserProfile%\Application Data\.exe'

Remove Folders and Files
%AppData%\[random].exe