Personal Shield Pro

Today we have Personal Shield Pro. To help removal, you can activate it with the following key:

8945315-6548431

This one stops other processes from running by telling us that we are "infected". To counteract this, locate "C:\Windows\System32\taskmgr.exe". Copy to the desktop and then rename to "explorer.exe". 

Find and kill the process.

Run MalwareBytes' quick scan to finish removal. 

Registry Keys:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce | <random>

Files:

C:\Documents and Settings\All Users\Application Data\<random>\<random>.exe