Wednesday, May 18, 2011

How to remove Security Shield from Windows 7

Just got a client that got the Security Shield popping out in his Windows 7..
after googling for a while, looks like it is a variation of Security Tool..
Quite an annoying malware..

I tried to kill the process via task manager, but the ware immediately killed my taskman everytime I run it..

My way of getting rid of it was:

1. run command prompt as an admin.
1.1 execute "tasklist", and get the name of the progam running. look for a program which uses random letter as its name such as "fddrogfd.exe" or similar...

1.2 execute "taskkill /F /IM program-name . substitute "program-name" with the program that you suspect in previous steps.. if the program disappears from the desktop, then it might be culprit..

2. run regedit and remove any instances of the program
2.1 search for the file as you found in 1.1
2.2 be careful not to delete system files..

3. remove the file
3.1 search for the file in you hard drive.
3.2 delete or move the file somewhere else..


note: you might got internet explorer popping out.. using command prompt, run "taskkill /F /IM iexplore* to kill them...


hope this helps...

0 comments: