Tuesday, November 4, 2008

The.Shield Adware

Removing The.Shield
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES%]\Spyware Scrapper Demo\AppRestart.exe
[%DESKTOP%]\the spyware shield demo.lnk
[%DESKTOP%]\thespywareshielddemo.msi
[%PROGRAM_FILES%]\the spyware shield demo\apprestart.exe
[%PROGRAM_FILES%]\the spyware shield demo\blockedcookies.dat
[%PROGRAM_FILES%]\the spyware shield demo\exedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\filedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\help.chm
[%PROGRAM_FILES%]\the spyware shield demo\registrydefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\riched32.dll
[%PROGRAM_FILES%]\the spyware shield demo\scan_log.txt
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshield.com.url
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshielddemo.exe
[%PROGRAM_FILES%]\Spyware Scrapper Demo\AppRestart.exe
[%DESKTOP%]\the spyware shield demo.lnk
[%DESKTOP%]\thespywareshielddemo.msi
[%PROGRAM_FILES%]\the spyware shield demo\apprestart.exe
[%PROGRAM_FILES%]\the spyware shield demo\blockedcookies.dat
[%PROGRAM_FILES%]\the spyware shield demo\exedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\filedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\help.chm
[%PROGRAM_FILES%]\the spyware shield demo\registrydefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\riched32.dll
[%PROGRAM_FILES%]\the spyware shield demo\scan_log.txt
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshield.com.url
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshielddemo.exe

How to detect The.Shield:

Files:
[%PROGRAM_FILES%]\Spyware Scrapper Demo\AppRestart.exe
[%DESKTOP%]\the spyware shield demo.lnk
[%DESKTOP%]\thespywareshielddemo.msi
[%PROGRAM_FILES%]\the spyware shield demo\apprestart.exe
[%PROGRAM_FILES%]\the spyware shield demo\blockedcookies.dat
[%PROGRAM_FILES%]\the spyware shield demo\exedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\filedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\help.chm
[%PROGRAM_FILES%]\the spyware shield demo\registrydefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\riched32.dll
[%PROGRAM_FILES%]\the spyware shield demo\scan_log.txt
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshield.com.url
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshielddemo.exe
[%PROGRAM_FILES%]\Spyware Scrapper Demo\AppRestart.exe
[%DESKTOP%]\the spyware shield demo.lnk
[%DESKTOP%]\thespywareshielddemo.msi
[%PROGRAM_FILES%]\the spyware shield demo\apprestart.exe
[%PROGRAM_FILES%]\the spyware shield demo\blockedcookies.dat
[%PROGRAM_FILES%]\the spyware shield demo\exedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\filedefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\help.chm
[%PROGRAM_FILES%]\the spyware shield demo\registrydefinition.dat
[%PROGRAM_FILES%]\the spyware shield demo\riched32.dll
[%PROGRAM_FILES%]\the spyware shield demo\scan_log.txt
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshield.com.url
[%PROGRAM_FILES%]\the spyware shield demo\thespywareshielddemo.exe

Folders:
[%PROGRAMS%]\thespywareshield.com software

Registry Keys:
HKEY_CURRENT_USER\software\vb and vba program settings\adwareremovalsoftware
HKEY_CURRENT_USER\software\vb and vba program settings\thespywareshield

Registry Values:
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8\sourcelist
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8\sourcelist
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8\sourcelist\media
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8\sourcelist\media
HKEY_CURRENT_USER\software\microsoft\installer\products\f578222c952a13f42bbf4b790d834fd8\sourcelist\net
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders

Removing The.Shield:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Brain Codec Trojan Removal instruction
PViever Trojan Removal instruction
Danton Trojan Cleaner
Removing Emusaffil Trojan
Remove SillyDl.DBN Trojan

No comments: