next »

[macca]

My son's computer, a little noptepad running XP sp3, seems to have been "invaded" by a program which keeps popping up telling him that he has a number of infected files and does he want to "register the program and delete them". It is no more than a money making scam as far as I can see. Among the so-called infected files is "Run.dll", which I believe is a pretty important system item. The "invader" program icon sits in the system tray and looks for all the world like the Windows red security shield. I have tried to do a system restore several times but the wretched "Security Shield" window pops up listing other infected files and prevents a system restore. Same deal with Spybot. Right clicking on the icon shows nothing and it doesn't show up in the list of removable programs. Any ideas on how to deal with it?

[neonwizard]

Firstly the best fix is backing up and reformatting but sometimes that is not possible so what you could try is download both: RogueRemover and Malwarebytes install and update both then run RogueRemover first then Malwarebytes

[macca]

Neon, thank you for the suggestions. Unfortunately, the "Security Shield" program (which is really a spyware program masquerading as anti-virus/malware remover) apparently installs in a manner such that it obstructs any normal attempt to download anti-malware programs (such as Rogueremover and Malwarebytes) and a devious process has to be followed for its removal. The process is discussed in Bleepingcomputer.com, at the following site:-
http://www.bleepingcomputer.com/virus-removal/remove-security-shield.
I haven't yet been through their recommended procedures to know if it works but, from previous dealings with this help site (referred there in the days of MsMega) I was able to succesfully remove an earlier problem program of a similar nature.
I post this reply hoping it might help anyone else who inadvertently picks up the Security Shield menace. 

[pinkcloud]

macca I haven't had anything like this since I followed Paul's advice (excellent) to install SpywareBlaster.

pinkcloud

[macca]

I'm hoping that after I clear out this pest and install Spywareblaster on my son's comp. he won't have any more problems either. Am just about to fire up the machine and start work. Will let you know how it all turns out.

[macca]

It took a while for a complete system scan but, all appears to be back to normal with Malwarebytes and Spywareblaster installed.