Friday, March 2, 2012

Personal Shield Pro

Today we have Personal Shield Pro. To help removal, you can activate it with the following key:


This one stops other processes from running by telling us that we are "infected". To counteract this, locate "C:\Windows\System32\taskmgr.exe". Copy to the desktop and then rename to "explorer.exe". 

Find and kill the process.

Run MalwareBytes' quick scan to finish removal. 

Registry Keys:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce | <random>


C:\Documents and Settings\All Users\Application Data\<random>\<random>.exe

No comments:

Post a Comment