FrEn

E-mail Print

Free malware removal tool for Personal Shield Pro
Written by Administrator  |  Friday, 10 June 2011 12:50
AddThis Social Bookmark Button
Personal Shield Pro is another spyware from the Security Tool family. Personal Shield Pro is not a legit program; it's a fake, a counterfeit. Personal Shield Pro claims to fix your system, but not, do not trust on it. Do not believe in the scan results of this pretentious, it's a scam, and the only flaw in your system is this Personal Shield Pro. Personal Shield Pro is just another fake Antispyware whose purpose is to trick you to pay this useless program. Uninstall Personal Shield Pro immediately from your system.

Personal Shield Pro

To remove Personal Shield Pro (Uninstall Personal Shield Pro)

  • Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
  • Choose Start computer in SAFE MODE with network support
  • Open Internet Explorer
  • Go to Tools => Internet Options => Connections Tab => LAN Settings
  • Uncheck "Use a proxy server"
  • Recheck "Automatically detect settings"
  • Download this free removal tool for Personal Shield Pro
  • Extract it
  • Launch
  • Click on the delete button

Personal Shield Pro will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • %CommonAppData%\[RANDOM].exe
  • %CommonAppData%\[RANDOM].pspro
    [RANDOM].pspro is configured to be a script which run each time windows starts.

Files :

  • %CommonAppData%\[random]
  • %CommonAppData%\[random]\[random].bat
  • %CommonAppData%\[random]\[random].cfg
  • %CommonAppData%\[random]\[random].exe

Registry

Registry Created Keys
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pspro
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\DefaultIcon
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\shell
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\shell\open
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\shell\open\command

Registry Created Values
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pspro
    • (Default) = "exefile"
    • Content Type = "application/x-msdownload"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\shell\open\command
    • (Default) = ""%CommonAppData%\[RANDOM].pspro" --startexe "%1""
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSP\DefaultIcon
    • (Default) = "%1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusDisableNotify = "1"
    • FirewallDisableNotify = "1"
    • UpdatesDisableNotify = "1"
    • AntiVirusOverride = "1"
    • FirewallOverride = "1"
      It will disable firewall notification or antivirus, update status through the Windows Security Center
  • HKEY_CURRENT_USER\Software\Microsoft\Windows
    • Identity = 0xD16C6E7D
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • [RANDOM].pspro = "%CommonAppData%\[RANDOM].pspro --run"

 

Download

 

Remove Personal Shield Pro Software manually :

  • Restart your computer in safe mode :
    • Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
    • Choose Start computer in SAFE MODE
  • Open the infected account
  • Open explorer, paste into the address bar the text %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
  • Remove all .exe files and all random folders under this path
  • Open explorer, paste into the address bar the text %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Application Data on my computer
  • Remove all .exe files and all random folders under this path
  • Remove Personal Shield Pro Software.lnk from your desktop
  • Remove Personal Shield Pro Software.lnk from your start menu
  • Click on the start menu button then click on run
  • Type msconfig and press enter
  • Go to the Startup tab
  • Uncheck all random character keys in it and click on the OK button
  • Restart your computer in normal mode
This will solve the problem but you can run the removal tool to remove the other registry keys and values.
 

Add comment


Security code
Refresh

Related articles
Latest posts

  • Free malware removal tool for Guard Online

    Written by %s admin 10/10/2011
    Guard Online is a another rogue Antispyware from the OpenCloud and AV Guard Online familly, it's a malware that pretends to be an Antivirus. Guard Online conducts a fake scan of your system; you are…
    Read more...

  • Free malware removal tool to remove AV Guard Online

    Written by %s admin 05/10/2011
    AV Guard Online is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. AV Guard Online conducts a fake scan of your system; you are warned by a…
    Read more...

  • Free removal tool to remove Security Guard 2012

    Written by %s admin 05/10/2011
    Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned…
    Read more...

  • Free removal tool for Advanced PC Shield 2012

    Written by %s admin 01/10/2011
    Advanced PC Shield 2012 is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. Advanced PC Shield 2012 conducts a fake scan of your system; you are warned by a fake alarm…
    Read more...

  • Security Sphere 2012 Free Removal Tool

    Written by %s admin 01/10/2011
    Security Sphere 2012 is another spyware from the Security Tool family. Security Sphere 2012 is not a legit program; it's a fake, a counterfeit. Security Sphere 2012 claims to fix your system, but…
    Read more...
.
Information | Contact

© All Rights Reserved. net-studio.org 2009