Added on 09 Feb 2010(529 Views)
classification: Rogue AntiSpyware Programs
The family of rogues that spawned Virus Shield 2009 gave us these other “gems”: Virus Sweeper, Malware Catcher 2009, Virus Alarm and Virus Doctor. All the rogues in this family, and Virus Shield 2009 is no exception, claim to be able to provide “full protection against potentially unwanted software, viruses and malware.” Virus Shield 2009 has zero malware fighting capabilities; it just claims to be able to do all those things to scam you. Making you believe Virus Shield 2009 is a genuine security software application is the first step in the scam.
After Virus Shield 2009 has been installed on your computer, it is time to for the second step in the scam. Each and every time you boot up your computer, Virus Shield 2009 popups up and performs a fake system scan. The scan flags numerous files as malware. If that wasn’t enough, the rogue also bombards you with popups and fake security alerts. Like these ones:
“System Alert. Malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Virus Shield.
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
Security Alert. Detected security problems on your computer Spyware is software, which can gather information from user’s computer through Internet connection and send them to its creator. Gather information can be passwords, e-mail addresses and all that data, which is important for you. WARNING! Your system is infected. It is necessary to improve PC security.”
Once you’re nice and scared it is finally time to scam you. The rogue offers to remove the infection and make things all better again, but only if you pay for a Virus Shield 2009 license first. Paying for a fake security software application to remove a made-up infection is a scam no matter how you look at it. Make the wise choice – remove the rogue from your system!
Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating Virus Shield 2009 from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.
Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).
Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:

- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.

- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.

- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.

- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.







Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for Virus Shield 2009 will complete swiftly.

Malwarebytes’ Anti-Malware will start scanning your files for signs of Virus Shield 2009. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.

When the scan for Virus Shield 2009 is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.


Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.

Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of Virus Shield 2009 should be left on your computer.
Manual removal guide
Stop and remove the processes:
Access the Windows Registry Editor and delete the following registry keys:
Locate and delete the following files:
Unregister the following DLL libraries:
Don't forget to:
Tags:
Link to this article:
Add comment:
The family of rogues that spawned Virus Shield 2009 gave us these other “gems”: Virus Sweeper, Malware Catcher 2009, Virus Alarm and Virus Doctor. All the rogues in this family, and Virus Shield 2009 is no exception, claim to be able to provide “full protection against potentially unwanted software, viruses and malware.” Virus Shield 2009 has zero malware fighting capabilities; it just claims to be able to do all those things to scam you. Making you believe Virus Shield 2009 is a genuine security software application is the first step in the scam.

After Virus Shield 2009 has been installed on your computer, it is time to for the second step in the scam. Each and every time you boot up your computer, Virus Shield 2009 popups up and performs a fake system scan. The scan flags numerous files as malware. If that wasn’t enough, the rogue also bombards you with popups and fake security alerts. Like these ones:
“System Alert. Malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Virus Shield.
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
Security Alert. Detected security problems on your computer Spyware is software, which can gather information from user’s computer through Internet connection and send them to its creator. Gather information can be passwords, e-mail addresses and all that data, which is important for you. WARNING! Your system is infected. It is necessary to improve PC security.”
Once you’re nice and scared it is finally time to scam you. The rogue offers to remove the infection and make things all better again, but only if you pay for a Virus Shield 2009 license first. Paying for a fake security software application to remove a made-up infection is a scam no matter how you look at it. Make the wise choice – remove the rogue from your system!
Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating Virus Shield 2009 from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.
Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).
Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:

- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.

- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.

- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.

- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.







Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for Virus Shield 2009 will complete swiftly.

Malwarebytes’ Anti-Malware will start scanning your files for signs of Virus Shield 2009. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.

When the scan for Virus Shield 2009 is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.


Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.

Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of Virus Shield 2009 should be left on your computer.
Manual removal guide
Stop and remove the processes:
VSHIELD.exe
ReleaseXP.exe
ReleaseXP.exe
Access the Windows Registry Editor and delete the following registry keys:
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Uninstall/Virus Shield 2009
HKEY_CLASSES_ROOT/CLSID/{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT/VShield.DocHostUIHandler
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/User Agent/Post Platform "69690903"
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run "Virus Shield 2009"
HKEY_CLASSES_ROOT/CLSID/{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT/VShield.DocHostUIHandler
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/User Agent/Post Platform "69690903"
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run "Virus Shield 2009"
Locate and delete the following files:
%UserProfile%/Application Data/Virus Shield 2009
c:/Documents and Settings/All Users/Application Data/7c69f0c
c:/Documents and Settings/All Users/Application Data/7c69f0c/15.mof
c:/Documents and Settings/All Users/Application Data/7c69f0c/VShield.exe
c:/Documents and Settings/All Users/Application Data/7c69f0c/ProtectSystem
c:/Documents and Settings/All Users/Application Data/7c69f0c/ProtectSystem/vd952342.bd
c:/Documents and Settings/All Users/Application Data/ProtectSystem
c:/Documents and Settings/All Users/Application Data/ProtectSystem/shld.ini
%UserProfile%/Application Data/Microsoft/Internet Explorer/Quick Launch/Virus Shield 2009.lnk
%UserProfile%/Application Data/Virus Shield 2009/Instructions.ini
%UserProfile%/Desktop/Virus Shield 2009.lnk
%UserProfile%/Start Menu/Virus Shield 2009.lnk
%UserProfile%/Start Menu/Programs/Virus Shield 2009.lnk
c:/Documents and Settings/All Users/Application Data/7c69f0c
c:/Documents and Settings/All Users/Application Data/7c69f0c/15.mof
c:/Documents and Settings/All Users/Application Data/7c69f0c/VShield.exe
c:/Documents and Settings/All Users/Application Data/7c69f0c/ProtectSystem
c:/Documents and Settings/All Users/Application Data/7c69f0c/ProtectSystem/vd952342.bd
c:/Documents and Settings/All Users/Application Data/ProtectSystem
c:/Documents and Settings/All Users/Application Data/ProtectSystem/shld.ini
%UserProfile%/Application Data/Microsoft/Internet Explorer/Quick Launch/Virus Shield 2009.lnk
%UserProfile%/Application Data/Virus Shield 2009/Instructions.ini
%UserProfile%/Desktop/Virus Shield 2009.lnk
%UserProfile%/Start Menu/Virus Shield 2009.lnk
%UserProfile%/Start Menu/Programs/Virus Shield 2009.lnk
Unregister the following DLL libraries:
ChkDisk.dll
Don't forget to:
Tags:
Link to this article:
Add comment:
Removal Guide Articles
How To Remove XP Micro Antivirus
If you did not manually install XP Micro Antivirus and ...
19 Feb 2010
How To Remove Software Antivirus
Software Antivirus, unlike what the name may suggest, is not ...
Software Antivirus, unlike what the name may suggest, is not ...
19 Feb 2010
How To Remove PC Security 2009
PC Security 2009, a rogue antispyware program, is usually distributed ...
19 Feb 2010
How To Remove Security Essentials 2010
The people with malicious intent that put out the ...
18 Feb 2010
How To Remove Personal Anti Malware
Personal Anti Malware, a rogue security software application, is usually ...
18 Feb 2010
Recommended Tools
Registry Booster 2011 Enhanced, deeper and faster error scan performance. Now also in 5 languages! Free Scan
Driver Scanner 2011
Fast and easy, it boosts performance by scanning for, downloading & installing driver updates
Fast and easy, it boosts performance by scanning for, downloading & installing driver updates
SpeedUpMyPC 2011
How fast is your PC really running? Turbo-charge your Internet and PC performance here
How fast is your PC really running? Turbo-charge your Internet and PC performance here



