Oct 31, 2009

Remove ShieldSafeness - Shield Safeness Removal Information

ShieldSafeness is a bogus security application form infamous Winisoft family. Parasite is promoted via Trojan horses. These Trojans impersonate falsh player or videocodecs updates. But be aware, these upadates are Trojan horses that will secretly download and install ShieldSafeness rogue onto your computer. Also thease Trojan will display fake security alerts on your computer and annoying pop-ups appearing from your Windows Taskbar. Moreover, Trojan will generate window that impersonate legitimate Windows Security Center which will suggest you to purchase licensed version of ShieldSafeness. ShieldSafeness will also bother you with different alerts, exaggerated scan results. Why exaggerated? Because all infections that ShieldSafeness will list after every scan was created by parasite itself and are absolutely harmless. Important to notice that for removing absolutely safe files ShieldSafeness will ask you to pay about a 50 $. That’s why we recommend you not to pay for ShieldSafeness license and remove it as soon as it is possible if there are any suspicion that your computer is infected.

Type: Rogue Anti-Spyware
Malware Author: Unknown

Threat Level: Critical
Screenshot:

How to remove ShieldSafeness manually:
It's possible to remove ShieldSafeness manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Documents and Settings\All Users\Desktop\ShieldSafeness.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\ShieldSafeness
c:\Documents and Settings\All Users\Start Menu\Programs\ShieldSafeness\1 ShieldSafeness.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\ShieldSafeness\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\ShieldSafeness\3 Uninstall.lnk
c:\Program Files\ShieldSafeness Software
c:\Program Files\ShieldSafeness Software\ShieldSafeness
c:\Program Files\ShieldSafeness Software\ShieldSafeness\ShieldSafeness.exe
c:\Program Files\ShieldSafeness Software\ShieldSafeness\uninstall.exe
c:\WINDOWS\10359virzs509.cpl
c:\WINDOWS\10380ha95tozl126.bin
c:\WINDOWS\10623spy65z9.bin
c:\WINDOWS\system32\2ed19pyz5re2156.bin
c:\WINDOWS\system32\2f53vir193z.bin
c:\WINDOWS\system32\2z075t59j48c.exe
%Temp%\unp4.tmp.exe


Remove registry entries:

HKEY_CURRENT_USER\Software\ShieldSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSafeness
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ShieldSafeness"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "unp4.tmp.exe"


Please be careful because manual removal of ShieldSafeness may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/