Tuesday, August 16, 2011

Remove Protection Shield Pro

Remove Protection Shield Pro
Protection Shield Pro is a fake antivirus program that try to pretend to be a real antivirus which can remove malware. However, Protection Shield Pro does not kill any malware from any computer. Protection Shield Pro infects the computer by installing KB1883574.exe into the computer which will try to disguise itself like a Windows update entitled System Security Pack Update. After installation complete, Protection Shield Pro will scan the computer and will surely state that the computer is infected by malwares and urge the user to buy the full version of Protection Shield Pro.



Protection Shield Pro can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Protection Shield Pro shown in the removal guide below. All files related to Protection Shield Pro must be deleted.



Protection Shield Pro should be removed immediately!



Protection Shield Pro Removal Guide

Kill Process

(How to kill a process effectively?)

[random].exe



Delete Registry

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM]"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM]"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[RANDOM].exe"

HKEY_CURRENT_USER\Software\[RANDOM]



Remove Folders and Files

%Programs%\Protection Shield Pro\Protection Shield Pro.lnk

%Programs%\Protection Shield Pro

%TempDir%\[random].exe

%TempDir%\[random]

[random].exe in hard drive

No comments:

Post a Comment