Friday, March 2, 2012

Personal Shield Pro


Today we have Personal Shield Pro. To help removal, you can activate it with the following key:

8945315-6548431


This one stops other processes from running by telling us that we are "infected". To counteract this, locate "C:\Windows\System32\taskmgr.exe". Copy to the desktop and then rename to "explorer.exe". 


Find and kill the process.


Run MalwareBytes' quick scan to finish removal. 



Registry Keys:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce | <random>


Files:

C:\Documents and Settings\All Users\Application Data\<random>\<random>.exe

No comments:

Post a Comment