Win32 Virus Removal

My Security Engine belongs to the family of rogue antispyware programs (Security Guard) that spreads on computer systems using Trojan viruses and fake online anti-malware scanners. As it makes its way into infecting a computer, it tries to convince computer users into purchasing the full version of a program.

Image source: Bleeping Computers

Once installed, it infiltrates the system by displaying many bogus security warnings detecting a series of system infections. It then recommends activating the My Security Engine application in order to prevent any kind of data loss or avoid theft of your personal data and personal credit card details.

The infection and destruction doesn’t end here as the Trojan also creates a bunch of files that have no significant function followed by running a false system scan displaying the earlier mentioned files as detected threats and the program offers purchasing My Security Engine in order to get rid of these threats. In either case, you should take measures to immediately remove My Security Engine as soon as noticing its first traces on a computer system.

Symptoms:

My Security Engine configures itself to start automatically when logging into Windows creates numerous files are falsely detected as malware when My Security Engine scans any computer system given below:

• %UserProfile%\Recent\ANTIGEN.dll
• %UserProfile%\Recent\CLSV.dll
• %UserProfile%\Recent\eb.sys
• %UserProfile%\Recent\energy.dll
• %UserProfile%\Recent\exec.dll
• %UserProfile%\Recent\exec.drv
• %UserProfile%\Recent\exec.tmp
• %UserProfile%\Recent\gid.dll
• %UserProfile%\Recent\kernel32.sys
• %UserProfile%\Recent\kernel32.tmp
• %UserProfile%\Recent\pal.dll
• %UserProfile%\Recent\PE.dll
• %UserProfile%\Recent\PE.exe
• %UserProfile%\Recent\ppal.drv
• %UserProfile%\Recent\runddlkey.drv
• %UserProfile%\Recent\SICKBOY.sys
• %UserProfile%\Recent\tjd.sys

After a system scan the application shows the list of above files As infections and will not allow to remove these until the program is purchased by the victim. As shared earlier, all the above files are harmless only created to convince the victim that the computer is infected so one should avoid purchasing the rogue program.

How to Remove the My Security Engine Virus

Always scan your system with a legitimate antispyware program but the following method has worked for many infected computers:

1. First of all close all programs especially Internet browsers and donot forget to make a backup of your computer in order to roll back in case of any system error.
2. Then attempt uninstalling the program My Security Engine by clicking Start > Settings > Control Panel > Add/Remove Programs and locating uninstall My Security Engine in the list.
3. Unregister My Security Engine registry keys by going to Start > Run > type regedit > press OK and change the specified value (in the right pane) by right-clicking on it and selecting Edit. Locate and delete the following My Security Engine registry keys: ZZZZZ
4. In the event that your homepage has been changed, go to Start > Control Panel > Internet Options > click the General tab > click default under home and add your desired default home page, and then click apply > OK. Just in case, open a new browser window to verify that your chosen default home page is displayed.
5. In order to deleting My Security Engine directories, go to Start > My Computer > Local Disk (C:\Program Files > My Security Engine). Right click on the My Security Engine folder and select delete.  The following message will appear: “You want to really remove the My Security Engine folder and send all of its content in the Recycle Bin?”; click Yes. Another message will declared: “rename, move, or delete My Security Engine may prevent the operation of some programs.” You want to continue? “; click Yes. Also remove My Security Engine from your desktop icons, drag them to the Recycle Bin.