Security Shield

Security Shield Description

ScreenshotSecurity Shield is a rogue security application with several clones (for example, Security Tool). Computers infected with the fake anti-virus program Security Shield become riddled with a host of problems that can turn them practically impossible to use. Security Shield is often associated with other malware infections, and the presence of Security Shield on a computer is, practically, a guarantee that the computer is infected with one of a variety of Trojans. This is due to the fact that rogue security programs like Security Shield are often installed by Trojans or are simply Trojans themselves. ESG malware analysts recommend removing a Security Shield infection from your computer system as soon as possible. Despite its claims and likeness to real security programs, Security Shield is nothing but a scam designed to steal your money.

Security Shield: One More Version of the Rogue Security Program Scam


Security Shield is one of many variants of rogue security programs, a con that has become especially prevalent since the middle of the 2000s decade. Most variants of this common scam work in the same way and Security Shield is one classic example of how a typical rogue anti-spyware program works. Usually, the rogue security program scam has the same steps:
  1. A Trojan will infect a computer system through any number of deceptive methods. Common methods that Trojans use to infect computer systems include pretending to be video codecs, being bundled along with popular downloads or being downloaded onto a computer system through the use of JavaScript and Flash exploits in corrupted advertisements and pop-up Windows. Whatever way the Trojan uses to infect a computer system, it will often run in the background without the user's knowledge. Common Trojans associated with roguewares like Security Shield include Vundo, Zlob, and the Fake Microsoft Security Essentials Alert Trojan.
  2. The Trojan will display a message claiming that the computer system is infected with a variety of worms, viruses or other malware problems. Then, it will offer the computer user the option to download a free anti-virus program to remove these problems. Some Trojans, like the Fake Microsoft Security Essentials Alert Trojan, actually mimic legitimate security alerts or error messages that a computer system would normally display. If the victim accepts, the rogue anti-virus program (Security Shield in this case) will be downloaded and installed. As part of its installation process, Security Shield makes harmful changes to the computer's settings and alters the Windows Registry to ensure that Security Shield can run in the background and launch automatically when Windows is started up.
  3. Security Shield, or the particular rogue anti-spyware program, will continue to claim that the computer is infected, but will demand that the user pay for a "full version", in order to fix these non-existent problems.

Infected with Security Shield? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Security Shield

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

How to Detect and Remove Security Shield Video

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Security Shield infects a computer.



ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Security Shield outbreaks and other threats from global to local level.

File System Details

Security Shield creates the following file(s):
# File Name Size MD5 Detection Count
1 %LOCALAPPDATA%\595230097.exe 1,146,368 d3a901302b63a05d4cdbaac9488d0201 217
2 %LOCALAPPDATA%\246950008.exe 875,008 330719fc514f618192665d70985ace2d 155
3 %LOCALAPPDATA%\4789509644.exe 875,008 ffc9258f16e6ff91a9c14637a425c2d3 155
4 %LOCALAPPDATA%\6323257655.exe 875,008 5b015e44b7dc0b36c6c98d93e0d0108b 155
5 %LOCALAPPDATA%\663846548.exe 865,280 2fa507da93111f0f620cbfebde1223ed 155
6 %LOCALAPPDATA%\4158304675.exe 898,048 b6afc9a9d7cdc8a597c42003649b63b0 152
7 %LOCALAPPDATA%\932735408.exe 888,832 a26fbb8a4f0f03396b220e2e932f80bf 152
8 %UserProfile%\Local Settings\Application Data\487839044.exe 391,168 b5faeb27a51c90d8e28da3cb3c7189ab 24

More Details on Security Shield

The following messages associated with Security Shield were found:
Security Shield
"cmd.exe" is infected with "Worm.Win32.Autorun.bnb". Do you want to register your copy and remove all threats now?
Security Shield
Security Shield Firewall Alert
Security Shield has prevented a program from accessing the internet.
"iexplore.exe" is infected "Trojan-Dropper.Win32.Agent". This worm has to tried to use "iexplore.exe" to connect to remove host and send your credit card information
Security Shield Warning
Intercepting malicious software that may violate your privacy and harm your computer has been detected. Click here to remove now with Security Shield.
Security Shield Warning
Some of the important system files on your PC were modified by malicious software. It may cause system crashes and data losses.
Click here to prevent non-authorized changes and remove threats (Recommended)
Security Shield Warning
Spyware.IEMonster activity detected. This form of spyware attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other commonly used programs. Click here to immediately remove it with Security Shield.

Site Disclaimer

6 Comments

  • jessika says:

    Good afternoon, many thanks for a genuinely unique article, I will not as a general rule attach remarks but really liked your weblog so thought say thanks for your time –
    Jasmine

  • AirB says:

    I was very pleased to find http://www.enigmasoftware.com. I wanted to thanks for your time for this wonderful read!! I definitely enjoying every little bit of it and I have you bookmarked to check out new stuff you blog post.

  • L A says:

    security shield does not allow me to download anything or open internet. so i cannot download your scanner. what do i do?

  • Billy Plane says:

    help my PC has Security shield.what do I do?

  • GoldSparrow says:

    Brian Siulinsky,

    Security Shield is one of the many rogue anti-spyware programs that SpyHunter detects. Please keep in mind that new variations and files associated with recent rogue anti-spyware programs appear regularly for the purpose of avoiding detection from security software. However, in the rare case that SpyHunter does not detect a specific rogue anti-spyware program, you may use SpyHunter’s Spyware HelpDesk ( /products/spyware-helpdesk/), a personalized one-on-one technical support service that allows our technicians to generate a custom fix for your unique infection and you can execute your custom fix through your SpyHunter.

    Hope this helps.

  • brian siulinski says:

    My computer got infected today by a malware virus called “Security Shield”. Will SpyHunter remove this virus? If so, I will purchase the program immediately.

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 4 + 12 ?