Security Central
June 11, 2011
What is Security Central?
Security Central is what is known as Rogue Antispyware – meaning that the program poses as legitimate antispyware software, when in fact, it is nothing more than spyware itself.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
Security Central is installed via a Trojan typically from questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
Security Central comes from the same family of rogues that includes Security Center and Security Suite.
What it Does:
Security Central will bombard your computer with numerous fake spyware alerts and scans in an attempt to lure you into purchasing the full version, which is nothing more than a hoax as Security Central is not legitimate software and is actually a spyare infection. Security Central can also hijack your web browser and redirect your search results to pages of its choosing, where you will likely encounter more fake alerts and spyware related warnings.
The larger threat that Security Central poses however, is that it can download and install keyloggers and other more severe malware that can log your keystrokes, websites visited, etc. and can send that information over the internet to a remote server where the hacker that created Security Central will then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – and may ultimately end up stealing your identity.
Optional Security Central Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend not attempting manual removal of Security Central unless are a trained computer professional. Security Central is a highly complex and dynamic rogue spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry wihout proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
<random>.exe
2. Delete Following Files and Directories
Windows XP
-
%AllUsersProfile%\Application Data\2ef60fed-027a-457c-9737-17ac37f7b7f7.dat
%AppData%\Microsoft\Internet Explorer\Quick Launch\Security Central.lnk
%UserProfile%\Desktop\Security Central.lnk
%Temp%ins3.tmp
%Temp%mv4.tmp
%Temp%wrk5.tmp
Windows 7 and Windows Vista
-
%AllUsersProfile%\Application Data\2ef60fed-027a-457c-9737-17ac37f7b7f7.dat
%AppData%\Microsoft\Internet Explorer\Quick Launch\Security Central.lnk
%UserProfile%\Desktop\Security Central.lnk
%Temp%ins3.tmp
%Temp%mv4.tmp
%Temp%wrk5.tmp
3. Delete the Following Registry Keys:
-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “2ef60fed-027a-457c-9737-17ac37f7b7f7″
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that Antivirus Action will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the filenames, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that Security Central is completely removed from your computer.
Security Shield 2011
June 11, 2011
What is Security Shield 2011?
Security Shield 2011 is yet another in a long line of rogue anti spyware programs - which are fraudulent programs that try to pass as legitimate utility software, when the reality is that these programs are actually spyware infections.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
Security Shield 2011 is typically installed via a Trojan, and it usually is found on questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
Security Shield 2011 comes from a family of rogues that has a long list – previous versions/names for this rogue include Security Tool, System Tool, Total Security, and Security Shield among others.
What it Does:
Security Shield 2011 does exactly what most other rogue anti spyware programs do – it bombards your computer with numerous fake system alerts and spyware scans in an attempt to scam you into purchasing the full version, which is nothing more than a hoax as Security Shield 2011 is not legitimate software and is actually a spyware infection. Security Shield 2011 can also hijack your web browser and redirect your search results to pages of its choosing, where you will likely encounter more fake alerts and system related warnings.
The larger threat that Security Shield 2011 poses however, is that it can download and install other extremely malicious malware that can log your keystrokes, websites visited, browsing habits, etc. and can send that information over the internet to a remote server where the hacker that created Security Shield 2011 can then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – which can ultimately lead to identity theft.
Optional Security Shield 2011 Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend against attempting manual removal of Security Shield unless are a trained computer professional. Security Shield 2011 is a highly complex and dynamic spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry without proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
.exe
2. Delete Following Files and Directories
Windows XP
%UserProfile%\Application Data\{random numbers}\{random numbers.exe}
Windows 7 and Windows Vista
%UserProfile%\AppData\Local\{random numbers}\{random numbers.exe}
3. Delete the following Registry keys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “{random numbers}”
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that Security Shield 2011 will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the file names, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that Security Shield 2011 is completely removed from your computer.
Milestone Antivirus
June 11, 2011
What is Milestone Antivirus?
Milestone Antivirus is the latest of rogue antispyware programs to hit the web. These are programs that pose as legitimate utility software, scaring users with fake security scans and warning messages, however these programs are fraudulent and are actually spyware themselves.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
Milestone Antivirus is typically installed via a Trojan, and it usually is found on questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
Milestone Antivirus is the latest rogue antispyware program from a ”family” or rogues that has a long history - previous versions/names for this rogue include Antivirus Scan, Security Suite, Antivirus Action, AV Security Suite, and Antivir Solution Pro among thers.
What it Does:
Milestone Antivirus will constantly bombard your computer with phony system alerts and spyware scans, trying to scare you into purchasing the full version, which is nothing more than a hoax as Milestone Antivirus is not legitimate software and is actually a spyware infection. Milestone Antivirus can also hijack your web browser and redirect your search results to pages of its choosing, where you will likely encounter more fake alerts and system related warnings.
The larger threat that Milestone Antivirus poses however, just as with any other rogue antispyware program, is that it can download and install other extremely malicious malware that can log your keystrokes, websites visited, browsing habits, etc. and can send that information over the internet to a remote server where the hacker that created Milestone Antivirus can then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – which can ultimately lead to identity theft.
Optional Milestone Antivirus Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend against attempting manual removal of Milestone Antivirus unless are a trained computer professional. Milestone Antivirus is a highly complex and dynamic spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry wihout proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
conhost.exe
csrss.exe
wskinn.exe
2. Delete Following Files and Directories
Windows XP
c:\Program Files\conhost.exe
c:\Program Files\csrss.exe
c:\Program Files\Milestone Antivirus.ico
c:\Program Files\nuar.old
c:\Program Files\sh3.dat
c:\Program Files\sh4.dat
c:\Program Files\skynet.dat
c:\Program Files\Milestone Antivirus\
c:\Program Files\Milestone Antivirus\Milestone Antivirus.exe
c:\Program Files\scdata\
c:\Program Files\scdata\wispex.html
c:\Program Files\scdata\wskinn.exe
c:\Program Files\scdata\images\
c:\Program Files\scdata\images\i1.gif
c:\Program Files\scdata\images\i2.gif
c:\Program Files\scdata\images\i3.gif
c:\Program Files\scdata\images\j1.gif
c:\Program Files\scdata\images\j2.gif
c:\Program Files\scdata\images\j3.gif
c:\Program Files\scdata\images\jj1.gif
c:\Program Files\scdata\images\jj2.gif
c:\Program Files\scdata\images\jj3.gif
c:\Program Files\scdata\images\l1.gif
c:\Program Files\scdata\images\l2.gif
c:\Program Files\scdata\images\l3.gif
c:\Program Files\scdata\images\pix.gif
c:\Program Files\scdata\images\t1.gif
c:\Program Files\scdata\images\t2.gif
c:\Program Files\scdata\images\Thumbs.db
c:\Program Files\scdata\images\up1.gif
c:\Program Files\scdata\images\up2.gif
c:\Program Files\scdata\images\w1.gif
c:\Program Files\scdata\images\w11.gif
c:\Program Files\scdata\images\w2.gif
c:\Program Files\scdata\images\w3.jpg
c:\Program Files\scdata\images\word.doc
c:\Program Files\scdata\images\wt1.gif
c:\Program Files\scdata\images\wt2.gif
c:\Program Files\scdata\images\wt3.gif
%UserProfile%\Desktop\Milestone Antivirus.exe.txt
%UserProfile%\Desktop\Milestone Antivirus.lnk
%UserProfile%\Start Menu\Programs\Milestone Antivirus\
%UserProfile%\Start Menu\Programs\Milestone Antivirus\Milestone Antivirus.lnk
Windows 7 and Windows Vista
c:\Program Files\conhost.exe
c:\Program Files\csrss.exe
c:\Program Files\Milestone Antivirus.ico
c:\Program Files\nuar.old
c:\Program Files\sh3.dat
c:\Program Files\sh4.dat
c:\Program Files\skynet.dat
c:\Program Files\Milestone Antivirus\
c:\Program Files\Milestone Antivirus\Milestone Antivirus.exe
c:\Program Files\scdata\
c:\Program Files\scdata\wispex.html
c:\Program Files\scdata\wskinn.exe
c:\Program Files\scdata\images\
c:\Program Files\scdata\images\i1.gif
c:\Program Files\scdata\images\i2.gif
c:\Program Files\scdata\images\i3.gif
c:\Program Files\scdata\images\j1.gif
c:\Program Files\scdata\images\j2.gif
c:\Program Files\scdata\images\j3.gif
c:\Program Files\scdata\images\jj1.gif
c:\Program Files\scdata\images\jj2.gif
c:\Program Files\scdata\images\jj3.gif
c:\Program Files\scdata\images\l1.gif
c:\Program Files\scdata\images\l2.gif
c:\Program Files\scdata\images\l3.gif
c:\Program Files\scdata\images\pix.gif
c:\Program Files\scdata\images\t1.gif
c:\Program Files\scdata\images\t2.gif
c:\Program Files\scdata\images\Thumbs.db
c:\Program Files\scdata\images\up1.gif
c:\Program Files\scdata\images\up2.gif
c:\Program Files\scdata\images\w1.gif
c:\Program Files\scdata\images\w11.gif
c:\Program Files\scdata\images\w2.gif
c:\Program Files\scdata\images\w3.jpg
c:\Program Files\scdata\images\word.doc
c:\Program Files\scdata\images\wt1.gif
c:\Program Files\scdata\images\wt2.gif
c:\Program Files\scdata\images\wt3.gif
%UserProfile%\Desktop\Milestone Antivirus.exe.txt
%UserProfile%\Desktop\Milestone Antivirus.lnk
%UserProfile%\Start Menu\Programs\Milestone Antivirus\
%UserProfile%\Start Menu\Programs\Milestone Antivirus\Milestone Antivirus.lnk
3. Delete the following Registry keys
HKEY_CURRENT_USER\Software\Milestone Antivirus
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QTUpdate
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘C:\Program Files\conhost.exe “%1″ %*’
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that Milestone Antivirus will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the filenames, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that Milestone Antivirus is completely removed from your computer.
Personal Shield Pro
June 3, 2011
What is Personal Shield Pro?
Personal Shield Pro is the latest of rogue antispyware programs to hit the web. These are programs that pose as legitimate utility software, scaring users with fake security scans and warning messages, however these programs are fraudulent and are actually spyware themselves.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
Personal Shield Pro is typically installed via a Trojan, and it usually is found on questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
Personal Shield Pro is the latest rogue antispyware program from a ”family” or rogues that has a long history - previous versions/names for this rogue include Antivirus Scan, Security Suite, Antivirus Action, AV Security Suite, and Antivir Solution Pro among thers.
What it Does:
Personal Shield Pro will constantly bombard your computer with phony system alerts and spyware scans, trying to scare you into purchasing the full version, which is nothing more than a hoax as Personal Shield Pro is not legitimate software and is actually a spyware infection. Personal Shield Pro can also hijack your web browser and redirect your search results to pages of its choosing, where you will likely encounter more fake alerts and system related warnings.
The larger threat that Personal Shield Pro poses however, just as with any other rogue antispyware program, is that it can download and install other extremely malicious malware that can log your keystrokes, websites visited, browsing habits, etc. and can send that information over the internet to a remote server where the hacker that created Personal Shield Pro can then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – which can ultimately lead to identity theft.
Optional Personal Shield Pro Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend against attempting manual removal of Personal Shield Pro unless are a trained computer professional. Personal Shield Pro is a highly complex and dynamic spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry wihout proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
.exe
2. Delete Following Files and Directories
Windows XP
%UserProfile%\Applicaton Data\{random numbers}\{random numbers.exe}
Windows 7 and Windows Vista
%UserProfile%\AppData\Local\{random numbers}\{random numbers.exe}
3. Delete the following Registry keys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “{random numbers}”
HKEY_CURRENT_USER\Software\”{random numbers}”
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that Personal Shield Pro will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the filenames, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that Personal Shield Pro is completely removed from your computer.
-
Editor’s Choice Winner
"Spyware Doctor also set a new record in the malware blocking test, scoring 9.7 out of 10 possible points"
-www.pcmag.com, October 15, 2009