Security Shield 2012

Security Shield 2012 Description

Security Shield 2012 is the latest variant of Security Shield, a fake anti-malware program from the WinWeb Security group of rogue security products. This family and its Security Shield branch in particular has been noted, not just for fake security warnings and fake scans, but also for blocking unrelated programs and denying access to common brands of web browsers by displaying fraudulent firewall alerts. Security Shield 2012 should be considered just as harmful as the rest of its ilk, and SpywareRemove.com malware experts recommend the utilization of standard anti-malware strategies to disable Security Shield 2012 from its automatic startup so that you can remove Security Shield 2012 with appropriate anti-malware software. As a threat to your computer’s ability to run anything other than Security Shield 2012 itself, Security Shield 2012 should never be tolerated on your PC or purchased (as Security Shield 2012 will so often request that you do).

Security Shield 2012 – the So-Called Shield That Saves All of Its Defensive Qualities for Itself

Like any good scam, Security Shield 2012 closely resembles that which Security Shield 2012 is trying to imitate and provides outwardly-convincing imitations of system scans and a variety of pop-ups, including firewall alerts and other types of error messages. While these warnings may look real, SpywareRemove.com malware experts have confirmed that Security Shield 2012 can’t detect real PC threats with any more competency than the original Security Shield could do – which is to say that Security Shield 2012 can’t do so at all. It’s recommended that you completely ignore any warning messages that may originate from Security Shield 2012 while effecting Security Shield 2012′s removal with appropriate anti-malware software, since information from Security Shield 2012 can only, at best, cause you to go on a wild goose chase after nonexistent types of malicious software. Examples of these errors include:

Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software…

[Winwebsec variant's name] Warning
Intercepting programs that may compromise your private and harm your system have been detected on your PC.
Click here to remove them immediately with [Winwebsec variant's name].

Security Monitor: WARNING!
Attention: System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
CLick [sic] Yes to download official intrusion detection system (IDS software).

[Winwebsec variant's name] Warning
Your PC is infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.
Click here to activate protection.

Security Shield 2012, like other members of its WinWeb Security family, may also block unrelated programs, especially programs that relate to system analysis or PC security. Web browsers can also be targeted by Security Shield 2012 in related attacks that use misleading ‘firewall’ alerts to imply that your web browser was blocked for your own protection. Some other applications, such as Notepad, may also trigger their own specific types of error messages that falsely indicate that they’re infected.

Dispelling the Self-Serving Protection That Security Shield 2012 Uses Against Your Computer

Since Security Shield 2012 may block the anti-malware scanners that should, preferably, be used in the process of deleting Security Shield 2012 (due to the inclusion of Windows Registry changes, random file names and other issues that make manual removal of Security Shield 2012 difficult), you should try to disable Security Shield 2012 before you attempt to uninstall Security Shield 2012. Safe Mode or booting from a USB drive may work to this end, although, in extreme cases, SpywareRemove.com malware analysts note that renaming blocked program files to unblocked ones (such as shutdown.exe, explorer.exe or soft_cleaner.exe) may allow you to run an anti-malware program while Security Shield 2012 is still active. You can also fake registration of Security Shield 2012 with the code ’64C665BE-4DE7-423B-A6B6-BC0172B25DF2.’

Other members of Security Shield 2012′s family, although less likely than Security Shield 2012 to be distributed widely in 2012, should also be contemplated just as adverse to your PC as Security Shield 2012 could be. Security Shield 2012′s predecessors include Disk Antivirus Professional, Security Tool, System Care Antivirus, Smart Protection 2012, System Tool 2011, System Progressive Protection, Security Shield, Winweb Security, System Adware Scanner 2010, Smart Fortress 2012, Total Security, Windows Ultra-Antivirus, Windows Attacks Preventor, Windows Secure Kit 2011, Advanced Security Tool 2010, AVASoft Antivirus Professional, MS Removal Tool, Security Shield/Scanner, Security Sphere 2012, Security Monitor 2012, Total Security 2009, Security Scanner 2012, Personal Shield Pro, System Security 2012, System Security, Live Essential Platinum, Advanced PC Shield 2012, Microsoft Antivirus 2013 and Live Security Platinum.

Security Shield 2012 Automatic Detection Tool (Recommended)

Technical Details

Registry Modifications

• The following newly produced Registry Values are:
  HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SecurityShield 2012"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\SecurityShield 2012HKEY_CURRENT_USER\Software\SecurityShield 2012

Home Malware ProgramsRogue Anti-Spyware Programs Security Shield 2012