Advanced PC Shield 2012 Removal – How To Video

Advanced PC Shield 2012 is a rogue antispyware that is made for cheating money from consumers. It presents itself as the most powerful antivirus software and tries to gain trust of consumers.

This rogue software is programmed to show fake infection results and doesn’t have any capability to scan your computer. It is pre-programmed to show certain infections to threat users and force them to purchase full version of rogue software. Don’t fall for this scam as this is a misleading software.

Advanced PC Shield 2012 gets distributed via illegal techniques. These techniques include bogus flash updates, compromised web pages, spam emails with attachments, p2p files sharing and other similar methods. Once installed in your computer, It will configure itself at startup and start bugging every now and then. It will conduct a series of fake scans and try to drag  you into purchasing full version of rogue software. It will show fake error messages like :

Application has been attacked with the virus!
Advanced PC Shield 2012 detect “GMER” corrupted by “Backdoor.Destroy”
Click here for immediately security scan.

Severe system damage!
Spyware and viruses detected in the background. Sensitive system components under attack! Data loss, identity theft and system corruption are possible.
Act now, click here for a free security scan

Tracking software found!
Your PC activity is being monitor. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen.

Here are several screenshots of Advanced PC Shield 2012 doing a fake scan and showing bogus security alerts :

Don’t get afraid of Advanced PC Shield 2012 as It be be removed easily with proper techniques. Follow these removal methods to get rid of rogue software easily :-

A) Automatic Removal

Automatic Removal is the best method to get rid of Advanced PC Shield 2012. This method requires you to download Spyware Doctor and scan your whole computer for infections. Spyware Doctor is equipped to deal with this rogue and remove it completely.

After downloading Spyware Doctor, install the software and update its virus definitions. After updating virus signatures, now you are ready to scan your computer. Run the software, Click on “Start Scan” button and you’ll these options:

a. Custom Scan
b. Intelli-Scan
c. Full Scan.

Select “Full Scan” option and then click on “Scan Now” button. Now Spyware Doctor will check all files on your computer and find all the infected files automatically. Once the scanning is complete, click “Fix Checked” button and now your computer is free from the rogue software.

B) Manual Removal

Manual removal is a risky process to remove the rogue software and can have adverse effect on your computer. We don’t recommend this method for average computer users as you may end up damaging your computer even further.

Please follow these removal steps at your own risk. If in doubt, consider using automatic removal method instead.

1. Try To Do a System Restore

Boot up your computer in safe mode and try to do a System Restore. If your computer just got infected today and you restore its settings to yesterday, It is very likely that problem will resolve just by doing System Restore.

To do a System Restore, please boot up your computer in “Safe Mode with Networking” mode (Keep pressing F8 button at startup and select this mode) and then click on Start—>Programs—>Accessories—>System Tools—>System Restore and follow the instructions thereon to complete the process. (More Help on How To Do System Restore)

2. Correct Malicious Registry Entries

Now you need to correct/remove the registry entries which were modified by the rogue software for its own benefit. You need to edit these registry entries : (Learn How To Edit Registry)

HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%Program Files%\Internet Explorer\iexplore.exe”‘
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’

Please note that from above registry entries, you need to remove some entries while correct other entries to their original values. If you don’t know how to do that, close the registry editor and opt for automatic removal method instead.

3. Remove Advanced PC Shield 2012 Files From Your Computer

After correcting the registry, please remove files associated with this rogue. Find these files and delete them. (Learn How To Search and Delete Files)

%System%\drivers\.sys
%UserProfile%\Desktop\Buy Advanced PC Shield 2012.lnk
%LocalAppData%\.exe

For Windows XP : C:\Documents and Settings\All Users\
For Windows Vista/7 : C:\Programdata\

In above folders, you’ll a folder with extremely strange name, like random characters. Browse that folder and delete the suspicious files.

If manual removal steps don’t work for you, consider using automatic removal method and watch the removal video above to see how to remove the rogue application.

Be Sociable, Share!

•