Home » News » Rogue Antispyware » Remove My Security Wall, My Security Wall Removal Help

Remove My Security Wall, My Security Wall Removal Help

By Bryan on February 15, 2010 | Rogue Antispyware, REAnti, RE Anti, Remove REAnti, My Security Wall, MySecurityWall, My SecurityWall, MySecurity Wall, Remove My Security Wall Remove My Security Wall, My Security Wall Removal Help

My Security Wall is not a security program, it's a fraud which should be avoided if possible. The application pretends to be a security tool in order to make the user purchase its software which is advertised as a reputable computer protection program. My Security Wall imitates the actions of a real antivirus such as security scans and warning messages. However, none of the threats detected by this fraudulent application are real. My Security Wall should not be trusted and by no means should it be purchased.

My Security Wall is distributed online either on websites promoting the program or through corrupt sites which use trojans to download and install the parasite. My Security Wall is also a malware seeking to violate the computer's security system and create security flaws which would allow other similar bogus applications to enter. My Security Wall may also cause system dysfunctions and other computer problems. The best way to deal with My Security Wall is to remove it as soon as possible.

Here are some examples of fake security warnings generated by My Security Wall:

System alert!
malicious applications, which may contains Trojans, were found
on your computer and are to be removed immediately. Click
here to remove these potentially harmful items using My
Security Wall

System alert!
My Security Wall has detected potentially harmful software in
your system. It is strongly recommended that you register My
Security Wall to remove all found threats immediately.

System alert!
Potentially harmful programs have been detected in your
system and need to be dealt with immediately. Click here to
remove them using My Security Wall.

Warning! Identity theft attempt detected
Hidden connection IP: 128.154.26.11

New processes created

kernel32.exe
ppal.exe
MS339.exe Learn how to remove malicious processes

New My Security Wall registry entries created

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Settings\5.0\User Agent\Post Platform "Build/13.00007"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "My Security Wall"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CLASSES_ROOT\xp_5f014.DocHostUIHandler Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

%Documents and Settings%\[UserName]\Application Data\My Security Wall
%Documents and Settings%\[UserName]\Application Data\My Security Wall\cookies.sqlite
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Wall.lnk
%Documents and Settings%\[UserName]\Desktop\My Security Wall.lnk
%Documents and Settings%\[UserName]\Recent\ANTIGEN.tmp
%Documents and Settings%\[UserName]\Recent\dudl.sys
%Documents and Settings%\[UserName]\Recent\energy.drv
%Documents and Settings%\[UserName]\Recent\exec.dll
%Documents and Settings%\[UserName]\Recent\exec.drv
%Documents and Settings%\[UserName]\Recent\grid.drv
%Documents and Settings%\[UserName]\Recent\hymt.drv
%Documents and Settings%\[UserName]\Recent\kernel32.exe
%Documents and Settings%\[UserName]\Recent\pal.drv
%Documents and Settings%\[UserName]\Recent\PE.drv
%Documents and Settings%\[UserName]\Recent\ppal.exe
%Documents and Settings%\[UserName]\Recent\tempdoc.dll
%Documents and Settings
%\[UserName]\Recent\tempdoc.drv
%Documents and Settings%\[UserName]\Recent\tjd.tmp
%Documents and Settings%\[UserName]\Start Menu\My Security Wall.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\My Security Wall.lnk
%Documents and Settings%\All Users\Application Data\221tb
%Documents and Settings%\All Users\Application Data\221tb\MS339.exe
%Documents and Settings%\All Users\Application Data\221tb\MSW.ico
%Documents and Settings%\All Users\Application Data\221tb\7463.mof
%Documents and Settings%\All Users\Application Data\221tb\mozcrt19.dll
%Documents and Settings%\All Users\Application Data\221tb\sqlite3.dll
%Documents and Settings%\All Users\Application Data\221tb\BackUp\Adobe Reader Speed Launch.lnk
%Documents and Settings%\All Users\Application Data\221tb\BackUp
%Documents and Settings%\All Users\Application Data\221tb\BackUp\Adobe Reader Synchronizer.lnk
%Documents and Settings%\All Users\Application Data\117fc\MSWSys
%Documents and Settings%\All Users\Application Data\117fc\MSWSys\vd952342.bd
%Documents and Settings%\All Users\Application Data\117fc\Quarantine Items
%Documents and Settings%\All Users\Application Data\MSEAIVCW
%Documents and Settings%\All Users\Application Data\MSEAIVCW\MSGWBQLMRPW.cfg
%Program Files%\Mozilla Firefox\searchplugins\search.xml Learn how to unregister malicious DLL files

How to remove My Security Wall

To remove My Security Wall manually you must block rogue My Security Wall related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious My Security Wall files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Windows 7 Antispyware 2012 removal tutorial

Windows 7 Antispyware 2012 is a fake computer protection application which spreads via trojan horse and is a copy of Win 7 Antispyware 2012 scam as well. The parasite is distributed online and is usually difficult to avoid if one does not employ reputable security service. Once installed it will display false system security warnings and the will prompt you buy a "full" version of this program to remove threats that don't even exist. For example:Malware Intrusion! Read more.


News categories

Latest news