Ask the Olive: “Security Shield” Removal
By Craig Lloyd on Feb 11th, 2011 at 1:06PM

An anonymous reader asks:
“I have no idea what I did, but I keep getting pop ups that says my computer is infected with viruses and that in order for it to get rid of them, it says I need to buy the full version of this program called “Security Shield”. For some reason it installed on my computer and I get these pop ups as soon as I turn on my computer. I tried to uninstall it but it won’t let me and it also won’t let me do a scan with my normal anti-virus program. How do I get rid of this!”
Malicious anti-virus programs are nothing new and once they get on your PC, it can be hell. I did a little bit of research about this “Security Shield” and it looks like it automatically installs onto your computer through other spyware and such. In order to do anything (like easily remove it), you have to pay up for the full version, which is how they get you. However there’s a couple of things you can try.
I actually just recently heard about this trick: The fake anti-virus program locks you out of certain tasks like running your real anti-virus program by blacklisting certain .exe files, but there are a couple that it allows like “explorer.exe” and “iexplore.exe”. Simply rename your real anti-virus program’s executable to either of these names and you should now be able to run it!
Another option is simply booting into Safe Mode w/ networking (Press F8 during boot process) and then running a virus scan to remove the fake anti-virus program.















