How to Remove ShieldSafeness | ShieldSafeness Removal Guide
The Wini family of rogue antivirus software has given us yet another version in the last couple days… ShieldSafeness. This is quick on the heels of SoftStronghold (softstronghold removal guide) and succeeds the following variants in this prolific family…. Softveteran (see the softveteran removal guide) but…. SoftCop (see the SoftCop removal guide.) But, the line goes much further back…. Softsoldier (How to remove SoftSoldier), ( TrustFighter TrustFighter Removal Guide, TrustSoldier removal guide and the following others… SafeFighter (Safefighter Removal), TrustCop (TrustCop Removal Guide), SecureWarrior (SecureWarrior Removal), SecurityFighter (SecurityFighter Removal), SecuritySoldier (SecuritySoldier Removal) and it also has gone under yet other names. Most all of the above have the same look and feel only the name is different and the removal approaches are very similar. Read on for shieldsafeness removal.
First off, by all means give a try to uninstalling ShieldSafeness through the control panel and add/remove programs. The worst that can happen is that it won’t work. Next, go ahead and grab a copy of malwarebytes antimalware from the virus removal toolkit page and a copy of process explorer in case you need it to kill off running processes.
As most of these rogue applications, ShieldSafeness will display falsified warnings and popups complaining that your computer is at risk and infected with viruses and other issues. All of these are falsified with the exception that the greatest problem with your computer is likely this rogue. The following message has been reported with ShieldSafeness installs:
Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of ShieldSafeness and remove spyware threats from your PC.
If you are very lucky you may be able to install, update and run a full scan with malwarebytes antimalware and completely remove shieldsafeness that way. If you are unable to install malwarebytes there are a few things you can try. 1) reboot into safe mode. Then rerun the installer 2) rename malwarebytes antimalwares install file to something else…. mypetinstaller.exe then retry the install/update/scan. 3) continue on with the next steps associated with manual removal and after the running processes associated with this rogue are killed off you should be able to install, update and run malwarebytes (or you can proceed with the manual removal of ShieldSafeness and use malwarebytes to clean up afterwards.
The following processes should be killed off using the task manager or process explorer. If you are unable to launch task manager you may be able to copy the executable (taskmgr.exe) and paste it to a new file name, then rename the file to something else….. myfile.exe Your second option is to use process explorer to kill off the following running programs:
ShieldSafeness.exe
Uninstall.exe
(there may be other running processes, use the list below of files to delete to find the patterns that this rogue uses to create the file names. Unfortunately the other file names will vary from install to install.)
The following files and folders should be removed for a complete removal of shieldsafeness:
%docs%\All Users\Desktop\ShieldSafeness.lnk
%docs%\All Users\Start Menu\Programs\ShieldSafeness
%docs%\All Users\Start Menu\Programs\ShieldSafeness\1 ShieldSafeness.lnk
%docs%\All Users\Start Menu\Programs\ShieldSafeness\2 Homepage.lnk
%docs%\All Users\Start Menu\Programs\ShieldSafeness\3 Uninstall.lnk
c:\Program Files\ShieldSafeness Software
%progfiles%\ShieldSafeness Software\ShieldSafeness
%progfiles%\ShieldSafeness Software\ShieldSafeness\ShieldSafeness.exe
%progfiles%\ShieldSafeness Software\ShieldSafeness\uninstall.exe
%win%\10359virzs509.cpl
%win%\10380ha95tozl126.bin
%win%\10623spy65z9.bin
%win%\system32\2ed19pyz5re2156.bin
%win%\system32\2f53vir193z.bin
%win%\system32\2z075t59j48c.exe
%tmp%\unp4.tmp.exe
The filenames above include some that have a random component. Use the patterns that you find above to help you find the files as they exist on your system. Realize that the exact filenames you have on your system may be different than the above.
After a complete manual removal of ShieldSafeness you should run an install/update and scan with malwarebytes antimalware and then followup with a respectable antivirus program such as AVG or Avira. After this you should have completed your ShieldSafeness removal.