Virus RemovalIf You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Computer Repair site or check out www.pcninja.com for live help.

Remove Security Shield

Remove Security Shield, 7.0 out of 10 based on 7 ratings

Security Shield is a false security client.  This malicious software will prevent legit programs like the Task Manager and other real security software from running.  Security Tool is a clone of Security Tool, Smart Security, System Tool and Total Security 2009.

On June 9th 2011 a newer version called Security Shield 2011 came out.  This threat is similar to the one shown in this guide.  Basically it's a clone so either guide should still work for you.

If Security Shield becomes as prevalent as Security Tool than this virus will infect tens of millions of people if not hundreds of millions of people.  In 2010 Security Tool was the most common rogue security client to hit the market.  It looks like this clone may just be the replacement of that fake security client.

Some of the FAKE warning messages you may see:

Intercepting malicious software that may violate your privacy and harm your computer has been detected. Click here to remove now with Security Shield.

Spyware.IEMonster activity detected. This form of spyware attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other commonly used programs. Click here to immediately remove it with Security Shield.

Some of the important system files on your PC were modified by malicious software. It may cause system crashes and data losses.
Click here to prevent non-authorized changes and remove threats (Recommended)

Security Shield Firewall Alert
Security Shield has prevented a program from accessing the internet.
“iexplore.exe” is infected “Trojan-Dropper.Win32.Agent”. This worm has to tried to use “iexplore.exe” to connect to remove host and send your credit card information

Security Shield

Security Shield

» Download Security Shield Removal Software

As soon as you find a copy of Security Shield on your computer, you should take steps to remove Security Shield. Security Shield removal is a process which involves stopping the main executable and after that you delete it as well as other traces in the registry and in temp file locations

Automatic Security Shield Removal

Online Security Shield Removal Service

computer repair

Remove Proxy Setting so You Can Connect to the Internet Again. ( MAY NOT BE NEEDED )

Proxy Settings

The above video is for Internet Explorer.  Chrome users should follow the video as well because Chrome uses the same settings.  For Firefox users please read the manual guide under the How to Guides section.  There is a manual guide for IE there as well.

Security Shield Removal Video

Security Shield

» Download Security Shield Removal Software

Security Shield Manual Removal Procedures

1.The first step you must take in order to remove Security Shield is to stop the following processes. Your traces will NOT be the same as bellow. They will be unique to your computer.

  • random-6 to 10 digit number.exe

  • HINT: The random folder may look similar to 54066343254.exe or six to ten charecters in lenth

To stop the above processes we recommend you do one of the following

1A. Open up the Task Manager and terminate the above executable.

1B. Right click on the Security Shield icon on the desktop and select properties. Now copy the file path on your computer and than re-name the executable and re-boot your computer. After you re-boot you should be able to delete the file.

1C. Browse to

XP

  • C:Documents and SettingsYOUR USER NAMELocal SettingsApplication Datarandom-6 to 10 digit number.exe

Vista / Windows 7

  • C:UsersJacobAppDataLocalrandom-6 to 10 digit number.exe

The next step in Security Shield removal is to delete the following file:

  • random-6 to 10 digit number.exe
  • c:programdatamicrosoftWindowsstart menuProgramssecurity shield.lnk

Once the above steps have been completed, Security Shield should no longer be running. At this time you need to run a FULL VIRUS SCAN. Don't skip this step. We recommend you scan with Spyware Doctor with Antivirus because it is known to remove Security Shield and will also pick up other viruses.

If you find this threat too hard to remove yourself and need an expert we recommend www.pcninja.com . They charge far less than others and are great at what they do.

Security Shield Registry Removal Proedures

Removing files and folders alone is not sufficient to completely remove Security Shield. The following keys and settings should also be removed from the Windows registry to complete Security Shield removal:

  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Security Shield

Security Shield Directories:

Windows XP

  • None at this time however it may change to the below directory
  • %Documents and Settings%All UsersApplication Datalocal[random]

Windows Vista/7:

  • None at this time however it may change to the below directory
  • C:UsersUSER NAMEAppDatalocalRANDOM

Just run a junk file cleaner.

www.pcninja.com or legitimate antivirus software such as Spyware Doctor with Antivirus to completely and safely remove Security Shield.

Related Article Keywords: Security Shield, Remove Security Shield, Security Shield 2010 Removal, How to Remove Security Shield

VN:F [1.9.10_1130]
Rating: 7.0/10 (7 votes cast)
VN:F [1.9.10_1130]
Rating: +1 (from 3 votes)
  • Anonymous

    Thank you very much deleted just like that every other website was trying to get me to buy there spyware nothing as simple as this great job

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Ben

    I’m not sure how old this pos is, but I found the program named huvien.exe instead of the random numbers. Also, I didn’t find anything out of the ordinary in the registry key listed. I did find huvien.exe under HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache and deleted it.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Thanks for the great video however, Security Shield downloaded itself on my computer as “ucbamwa.exe” instead of a number. The only way I found it was from searching my local file. Just wanted to leave that bit of info.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • NotAnonymous

    i restarted my pc,right click security shield>open location>change name(make sure to replace the .exe) then shift delete.poof gone whit the wind

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    yep. that’s how the video and guide basically work. You just need to run a full virus scan now to ensure you got all the Security Shield traces and to make sure your not infected with any trojans. As stated we recommend doing the scan with Spyware Doctor with Antivirus

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Instructions basically worked, but a few things to add:
    - Security Shield wouldn’t let me run regedt, or even task manager, so i needed to boot safe mode before I could do any of this.
    - on my machine the executable under appdata was “ilerfu” clearly they’ve moved on from random digits to random letters
    - the registry entry to run it on reboot was hiding under “run once” rather than “run”

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Thanks for the update. It’s sure to help others

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • AnonymouslyAnonymous

    Everytime I go to delete it, it says….

    “Cannot Delete: Access is Denied.

    Make Sure the disk is not full or write-protected and that the file is not currently in use.”

    I am getting frustrated.
    I have located it, but I cannot find a way to delete it!

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • AnonymouslyAnonymous

    Will The Spyware Doctor with AntiVirus delete Security Shield itself?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Jacob

    You are most likely not following the guide. The VERY FIRST STEP instructs you to first stop this process from running. You can not delete a file while it is in use. You must stop it then you can delete it.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Jacob

    I would not recommend an Antivirus client that is not capable of removing this threat.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Nick

    Help? Think I have successfully removed this pest – all subsequent scans – Anti Virus, Windows Defender are clean and computer operating normally. However when I attempt to open Internet Explorer, I get the message ‘unable to connect’. My PC has a wireless link to my router.
    Any suggestions would be gratefully received. Someone has suggested, setting up a new user profile – otherwise am I facing a rebuild?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Jacob

    What have you already done? Did you re-set the proxy settings as shown in the guide. If not that would be my first suggestion. Let us know if you did that yet.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Beauchameau

    I’m trying to removed this from my PC and I can’t, Mother !@##$$%

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Zambrano 99

    this wont wprk im on my other computer and it doesnt let me do shit!

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    What is it in the guide that you are not able to do? Be Specific with what you are trying to do exactly and what you have done already. Just cussing will get you no were.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Hopewotowich

    Ok so i have Security Shield on my other PC and it will not let me remove it, whenever i go to a useful website it will interupt me with a virus scan thing saying the other website is infected. I can only open a very few useless programs. How do i get Security Shield off of my computer? Will i have to reformat the entire thing?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Hopewotowich

    the first comment was made 4 months ago and you just responded to it yesterday??? i cant wait that long! this is a terrible way to help people with their problems!

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    FOLLOW THE GUIDE!!!!!!!!!!!!!!! That is how you remove it. That simple. If you have a specific question in the guide you can ask it.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Not true. However now I will not respond and spend my free time helping you out. Time for reply 2 minutes

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Aieee

    Ok so i just removed the security shield program through task manager (thank you so much!!!!!!!!) but when i tried following up by removing all traces from the folders, i could not seem to find security shield anywhere under the c: folder. Im really nervous that there may still be traces of it on my computer. Is there any way to find the file, or another way to ensure that it is gone for good? (my trial or spyware doctor must have ran out a long time ago, and i’m not sure my malwarebytes is picking up on anything)

    Thank you very much.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    By terminating the threat in the TaskManager you did not delete it. You basically just told it to stop running. When you re-boot it will start again. With that said the next time you boot up you should be able to right click on the file in the Task Manager and then select “open containing folder” or something like that. Then you can find the .exe file and delete it.

    You should also be able to locate the file by browsing to the folder location shown in the guide and removing it that way. Malwarebytes should be able to pick this threat up as well. The Trial of SDA if old as you say it is, you should be able to remove it and then download the 2012 version of the software and run a scan to locate any other threats. Keep in mind that the free trial does not remove virus threats. However it will tell you what if anything is left over and the EXACT location on your computer were the file is at so you can manually delete Security Shield.

    It sounds like you are not using any active Antivirus software. I strongly urge you to purchase an AV program to protect your computer in the future. If your still having troubles hit me back or send me an e-mail through the contact us form with your contact info and I’ll see what I can do to help you out.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • banana

    Just to let you know, my exe hadn’t a numeric name, but was just a random assortment of letters. Thanks for the help

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Thanks for the heads up. Been hearing that a lot lately so I’m guessing it mutated. This threat is about a year old so it’s to be expected.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Hilary

    Bah! What a headache! Finally got the task manager to come up. My exes were also alphabetical…there were two, created at the same time. I deleted them and cleared out all traces i could find. It doesnt come up when I reboot anymore, but my computer is super slow and my game (WOW) wont come up at all. I never did find “Security Shield” when I did a search under the start menu, but my virus scan isnt picking up anything either. Heeeeeelp, please!!

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Kkhanna

    thank you so much….it was driving me nuts….the instructions worked like a charm….how do i make sure its ccompletely gone?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Mr Madia

    I cannot open task manager, and I cannot find the .exe in the local folder or the roaming folder. Is there anywhere else it might be located?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Mr Madia

    Windows 7, by the way. I’m not sure what the current protection is because it’s not my computer.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Tshaw321

    I cannot open my task manager help please

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    You don’t need to. Read the guide and then if you need help let me know exactly what step it is you are stuck on and what you are trying to do. Your operating system is also needed for me to ensure you are looking in the right place

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • JDvoracek

    Feedback: Window 7
    1) Had to boot in safe mode otherwise registry editor just closed itself immediately
    2) Deleted C:UsersJohnAppDataLocalsjbogol.exe
    3) Deleted HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOncesjobgol.exe registry key
    4) Microsoft security essentials did not find these!

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Thanks for sharing. Looks like the threat is still hiding in the Local folder.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Reuben

    Hi, I just went through this process and I’m pretty sure it worked :D I just need to run a full scan, but before that, I should tell you that when I found the process in task manager, it had a strange icon, a little bit like a blob, and it was called ‘ogauej’.
    now at first I didn’t realise this was the sneaky little security shield and nearly completely missed it – I just though it’d be best to tell :)

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Silver_for_you

    where do I find the task manager in the safe mode or for that matter any mode

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    ctrl+shift+esc. Answers like this are super easy to find online. Just do a search for what it is you are trying to do. For this instance you just would of had to do a search for “open Task Manager”

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.