{"id":14511,"date":"2013-11-13T08:57:09","date_gmt":"2013-11-13T08:57:09","guid":{"rendered":"http:\/\/malwaretips.com\/blogs\/?p=14511"},"modified":"2013-11-13T08:57:09","modified_gmt":"2013-11-13T08:57:09","slug":"web-surf-shield-removal","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/web-surf-shield-removal\/","title":{"rendered":"Remove Web Surf Shield virus (Removal Guide)"},"content":{"rendered":"<p>The Web Surf Shield notification is a computer virus, which will block your from visiting Facebook, Google, Youtube and other websites, and instead it will display a fake error message asking you to complete a survey or download a malicious program.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-14514\" title=\"Web Surf Shield virus\" alt=\"[Image: Web Surf Shield virus]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-virus.jpg\" width=\"724\" height=\"378\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-virus.jpg 724w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-virus-300x156.jpg 300w\" sizes=\"(max-width: 724px) 100vw, 724px\" \/><br \/>\nThis threat is distributed through several means. Malicious websites, or legitimate websites that have been compromised, may drop this Trojan onto a compromised computer. This drive-by-download often happens surreptitiously. Another method used to propagate this type of malware is spam email containing infected attachments or links to malicious websites. The threat may also be downloaded manually by tricking the user into thinking they are installing a useful piece of software.<br \/>\nThe Web Surf Shield virus is also prevalent on peer-to-peer file sharing websites and is often packaged with pirated or illegally acquired software.<\/p><div id=\"mwtad2276170793\" class=\"gas_fallback-ad_309684--placement_360520\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>Once install on a computer, Web Surf Shield virus will drop several malicious files, and it modify the HOSTS file by adding additional rules which will redirect your web browser.<br \/>\nThe HOSTS file is like an address book, when you type an address like www.facebook.com into your browser, the Hosts file is consulted to see if you have the IP address, or &#8220;telephone number,&#8221; for that site. When infected with this trojan, the cyber criminals will add to your Hosts some new rules,which will resolve domain names to their malicious IP addresses.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-14515\" title=\"Web Surf Shield virus\" alt=\"[Image:  Web Surf Shield hijack]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-hijack.jpg\" width=\"309\" height=\"273\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-hijack.jpg 309w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-hijack-300x265.jpg 300w\" sizes=\"(max-width: 309px) 100vw, 309px\" \/><\/p>\n<p>After your HOSTS file was changed, whenever you&#8217;ll try to visit Amazon, eBay, PayPal and other popular websites, you&#8217;ll be redirect a to malicious domain which will ask you to complete a survey before allowing you visit to any of these websites.<\/p><div id=\"mwtad3191688629\" class=\"gas_fallback-ad_381396-ad_309691-placement_360566\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<blockquote><p><span style=\"color: #ff0000;\"><strong>Web Surf Shield<\/strong><\/span><\/p>\n<p>Access to this page has been temporarily blocked. Please take time to download our Web Surf Shield update below.<br \/>\nYou can continue accessing this site after this update. Thank you!<\/p><\/blockquote>\n<p>If by any chance, you download and install Web Surf Shield, then each time you will try to access Youtube, Facebook or any other website, this infection will ask you to complete a survey.<br \/>\nThe Web Surf Shield message will ask you to verify that you are a human and not a computer by filling in the survey. If you agree to take this survey, you&#8217;ll have to enter your phone number and <strong>by completing the survey you automatically agree that you will pay $5 a week<\/strong> for a service you definitely do not need.<\/p>\n<p>The <strong>Web Surf Shield message is a scam<\/strong>, and you should ignore any alerts that this malicious software might generate.<br \/>\n<strong>Under no circumstance should you enter your phone number or pay any amount of money<\/strong> as this could lead to identity theft, and if you have, you should contact your bank and dispute the charge stating that the program is a scam and a computer virus.<\/p>\n<div id=\"mwtad3588129643\" class=\"gas_fallback-ad_309746-ad_309691-placement_360521\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>How to remove Web Surf Shield virus (Removal Guide)<\/h2>\n<p>This page is a comprehensive guide, which will remove the Web Surf Shield infection from your your computer. Please perform all the steps in the correct order. If you have any questions or doubt at any point,\u00a0<strong>STOP<\/strong>\u00a0and ask for our assistance.<br \/>\n<a href=\"#hosts\"><strong>STEP 1<\/strong>: Reset the Windows Hosts file back to its default settings<\/a><br \/>\n<a href=\"#rkill\"><strong>STEP 2<\/strong>: Run RKill to terminate Web Surf Shield malicious processes<\/a><br \/>\n<a href=\"#malwarebytes\"><strong>STEP 3<\/strong>: Remove Web Surf Shield virus with Malwarebytes Anti-Malware Free<\/a><br \/>\n<a href=\"#roguekiller\"><strong>STEP 4<\/strong>: Remove Web Surf Shield trojan with RogueKiller<\/a><br \/>\n<a href=\"#hitmanpro\"><strong>STEP 5<\/strong>: \u00a0Remove Web Surf Shield infection with HitmanPro<\/a><br \/>\n<a href=\"#reset-browser\"><strong>STEP 6<\/strong>: Remove Web Surf Shield virus from Internet Explorer, Firefox and Chrome<\/a><br \/>\n<a href=\"#adwcleaner\"><strong>STEP 7<\/strong>: Remove Web Surf Shield adware with AdwCleaner<\/a><\/p><div id=\"mwtad1686862188\" class=\"gas_fallback-ad_309686-ad_309691-placement_360569\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<div id=\"mwtad247424934\" class=\"gas_fallback-ad_309747-ad_309691-placement_360587\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"hosts\">STEP 1: Reset the Windows Hosts file back to its default settings<\/h2>\n<p>The Web Surf Shield Trojan has modified your Hosts file, so that you&#8217;ll be redirected to those survey websites. To reset the Hosts file back to its default settings, we will run <strong>Microsoft Fix it 50267<\/strong>, however because usually the cyber criminals have changed the permissions for the HOSTS file, we will first need to revert this modification.<\/p>\n<ol>\n<li>Hosts-perm.bat is a batch file that will reset the permissions for the Windows HOSTS file.<br \/>\nThis infection will change the permissions on the HOSTS file so that you are unable to delete it or modify it. Hosts-perm.bat will reset these permissions so that you will once again have full access to it.<br \/>\nYou can download Hosts-perm.bat from the below link:<br \/>\n<strong><a title=\"Download Hosts-perm.bat\" href=\"http:\/\/www.bleepingcomputer.com\/download\/hosts-permbat\/\" target=\"_blank\" rel=\"noopener noreferrer\">HOSTS-PERM.BAT DOWNLOAD LINK<\/a><\/strong>\u00a0 <em>(This link will open a new web page from where you can download Hosts-perm.bat)<\/em><br \/>\nDouble-click the <em>hosts-perm.bat<\/em> file and when it is done you will see a message stating &#8220;The Permissions on the HOSTS file have been reset.&#8221;.Press any key on your keyboard to exit the batch file.<\/li>\n<li><strong>Download Microsoft Fix it 50267<\/strong>\u00a0from\u00a0the below link.<br \/>\n<strong><a title=\"Download Microsoft Fix it 50267\" href=\"http:\/\/go.microsoft.com\/?linkid=9668866\" target=\"_blank\" rel=\"noopener noreferrer\">MICROSOFT FIX IT 50267 DOWNLOAD LINK<\/a><\/strong>\u00a0 <em>(This link will automatically download Microsoft Fix it 50267 on your computer)<\/em><\/li>\n<li>Double click on <strong>MicrosoftFixit50267<\/strong>, then follow the prompts to reset your Windows Hosts file.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-7650\" title=\"Reset Hosts file back to default settings\" alt=\"[Image: Repair HOSTS file]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/03\/reset-hosts-file.jpg\" width=\"503\" height=\"410\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/03\/reset-hosts-file.jpg 503w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/03\/reset-hosts-file-300x244.jpg 300w\" sizes=\"(max-width: 503px) 100vw, 503px\" \/><\/li>\n<\/ol>\n<div id=\"mwtad1746407308\" class=\"gas_fallback-ad_309748-ad_309691-placement_360588\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"rkill\">STEP 2: Run <strong>RKill<\/strong> to terminate Web Surf Shield malicious processes<\/h2>\n<p>RKill is a program that will attempt to terminate all malicious processes associated with Web Surf Shield infection, so that we will be able to perform the next step without being interrupted by this malicious software.<br \/>\nBecause this utility will only stop Web Surf Shield running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again.<\/p>\n<ol>\n<li>Please download the latest official version of RKill from the below link.<br \/>\n<a href=\"http:\/\/www.bleepingcomputer.com\/download\/rkill\/dl\/11\/\" target=\"_blank\" rel=\"noopener\"><strong>RKILL DOWNLOAD LINK<\/strong><\/a> <em>(This link will automatically download RKILL renamed as iExplore.exe)<\/em><\/li>\n<li>Double click on <strong>iExplore.exe<\/strong> to start RKill and stop any processes associated with Web Surf Shield virus.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6071\" title=\"Rkill renamed to iExplore.exe\" alt=\"[Image: RKILL Program]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-run-as-admin.jpg\" width=\"260\" height=\"115\" \/><\/li>\n<li>RKill will now start working in the background, please be patient while the program looks for Web Surf Shield malicious process and tries to end them.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6069\" title=\"RKill while killing Web Surf Shield malicious process\" alt=\"[Image: RKILL stoping malware]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-program.jpg\" width=\"406\" height=\"205\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-program.jpg 406w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-program-300x151.jpg 300w\" sizes=\"(max-width: 406px) 100vw, 406px\" \/><\/li>\n<li>When the Rkill utility has completed its task, it will <strong>generate a log<\/strong>. Do not reboot your computer after running RKill as the malware programs will start again.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6070\" title=\"RKill Log\" alt=\"[Image: RKill Report]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-report.jpg\" width=\"414\" height=\"187\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-report.jpg 414w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/rkill-report-300x135.jpg 300w\" sizes=\"(max-width: 414px) 100vw, 414px\" \/><\/li>\n<\/ol>\n<hr \/>\n<div id=\"mwtad1897434199\" class=\"gas_fallback-ad_318930-ad_309691-placement_360589\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3818335085\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"malwarebytes\">STEP 3: Remove Web Surf Shield virus with Malwarebytes Anti-Malware FREE<\/h2>\n<p>Malwarebytes Anti-Malware Free utilizes Malwarebytes powerful technology to detect and remove all traces of malware including worms, trojans, rootkits, rogues, dialers, spyware and more.<\/p><div id=\"mwtad4236371779\" class=\"gas_fallback-ad_381401-ad_309691-placement_360573\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"5315249587\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol>\n<li>You can <strong>download Malwarebytes Anti-Malware Free<\/strong> from the below link, then double-click on the icon named <strong>mbam-setup.exe<\/strong> to install this program.<br \/>\n<a href=\"http:\/\/malwaretips.com\/download-malwarebytes\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK<\/strong><\/a><em>(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)<\/em><\/li>\n<li>When the installation begins, <strong>keep following the prompts<\/strong> in order to continue with the setup process, then at the last screen click on the <strong>Finish<\/strong> button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6075\" title=\"Malwarebytes Anti-Malware installation screen\" alt=\"[Image: Malwarebytes Anti-Malware final installation screen]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-installation.jpg\" width=\"402\" height=\"310\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-installation.jpg 402w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-installation-300x231.jpg 300w\" sizes=\"(max-width: 402px) 100vw, 402px\" \/><\/li>\n<li>On the <strong>Scanner<\/strong> tab, select <strong>Perform quick scan<\/strong>,\u00a0and then click on the <strong>Scan<\/strong> button to start searching for the Web Surf Shield malicious files.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6076\" title=\"Run a Quick Scan with Malwarebytes Anti-Malware\" alt=\"[Image: Malwarebytes Anti-Malware Quick Scan]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-quick-scan.jpg\" width=\"521\" height=\"397\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-quick-scan.jpg 521w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-quick-scan-300x228.jpg 300w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/li>\n<li>Malwarebytes&#8217; Anti-Malware will now start scanning your computer for Web Surf Shield virus as shown below.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6077\" title=\"Malwarebytes Anti-Malware scanning for Luhe.Sirefef.A\" alt=\"[Image: Malwarebytes Anti-Malware scanning for Luhe.Sirefef.A\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan.jpg\" width=\"521\" height=\"397\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan.jpg 521w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan-300x228.jpg 300w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/li>\n<li>When the Malwarebytes Anti-Malware scan has finished, click on\u00a0the <strong>Show Results<\/strong> button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6078\" title=\"Malwarebytes when the system scan has completed\" alt=\"[Image: Malwarebytes Anti-Malware scan results]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan-results.jpg\" width=\"521\" height=\"397\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan-results.jpg 521w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-scan-results-300x228.jpg 300w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/li>\n<li>You will now be presented with a screen showing you the computer infections that Malwarebytes Anti-Malware has detected. Make sure that everything is <strong>Checked (ticked)<\/strong>, then click on the <strong>Remove Selected<\/strong> button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6079\" title=\"Malwarebytes Anti-Malwar removing Web Surf Shield virus\" alt=\"[Image: Malwarebytes Anti-Malwar removing Web Surf Shield virus]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-virus-removal.jpg\" width=\"521\" height=\"397\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-virus-removal.jpg 521w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/01\/malwarebytes-virus-removal-300x228.jpg 300w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/li>\n<li>Once your computer will restart in Windows regular mode, open Malwarebytes Anti-Malware and perform a <strong>Full System<\/strong> scan to verify that there are no remaining threats.<\/li>\n<\/ol>\n<hr \/>\n<div id=\"mwtad1316431382\" class=\"gas_fallback-ad_381388-ad_309691-placement_381390\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3191649120\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"roguekiller\">STEP 4: Remove Web Surf Shield registry keys with RogueKiller<\/h2>\n<p>RogueKiller is a utility that will scan for the Web Surf Shield rootkit, registry keys and any other malicious files on your computer.<\/p>\n<ol>\n<li>You can download the latest official version of <strong>RogueKiller<\/strong> from the below link.<br \/>\n<strong><a href=\"http:\/\/tigzy.geekstogo.com\/roguekiller.php\" target=\"_blank\" rel=\"noopener noreferrer\">ROGUEKILLER DOWNLOAD LINK<\/a><\/strong> <em>(This link will open a new web page from where you can download RogueKiller on your computer)<\/em><\/li>\n<li><strong>Double-click on RogueKiller.exe<\/strong> to start this utility and then <strong>wait for the Prescan to complete<\/strong>.This should take only a few seconds, \u00a0then click on the Scan button to perform a system scan.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6560\" title=\"Click on the Start button to perform a system scan\" alt=\"[Image: RogueKiller scaning for Web Surf Shield virus]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-scan.jpg\" width=\"520\" height=\"390\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-scan.jpg 520w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-scan-300x224.jpg 300w\" sizes=\"(max-width: 520px) 100vw, 520px\" \/><\/li>\n<li>After the scan has completed, <strong>press the Delete button<\/strong> to remove Web Surf Shield malicious registry keys or files.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-6559\" title=\"Press Delete to remove Web Surf Shield virus\" alt=\"[Image: RogueKiller Detele button]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-delete.jpg\" width=\"520\" height=\"390\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-delete.jpg 520w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/02\/roguekiller-delete-300x224.jpg 300w\" sizes=\"(max-width: 520px) 100vw, 520px\" \/><\/li>\n<\/ol>\n<hr \/>\n<div id=\"mwtad4091680678\" class=\"gas_fallback-ad_381392-ad_309691-placement_381395\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"2944237110\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"hitmanpro\">STEP 5: Remove Web Surf Shield infection with HitmanPro<\/h2>\n<p>HitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti virus software, firewalls, etc.).<\/p>\n<ol>\n<li>You can <strong>download HitmanPro<\/strong> from the below link:<br \/>\n<a href=\"http:\/\/malwaretips.com\/download-hitman-pro\" target=\"_blank\" rel=\"noopener noreferrer\"> <strong>HITMANPRO DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a web page from where you can download HitmanPro)<\/em><\/li>\n<li>Double-click on the file named <strong>HitmanPro.exe<\/strong> (for 32-bit versions of Windows) or <strong>HitmanPro_x64.exe<\/strong> (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5176\" title=\"HitmanPro startup screen (Click Next)\" alt=\"HitmanPro scanner\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-install.jpg\" width=\"497\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-install.jpg 497w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-install-300x237.jpg 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><br \/>\nClick on the <strong>Next<\/strong> button, to install HitmanPro on your computer.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5179\" title=\"HitmanPro installation options (Click Next)\" alt=\"HitmanPro installation\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmapro-start-scan.jpg\" width=\"497\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmapro-start-scan.jpg 497w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmapro-start-scan-300x237.jpg 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/li>\n<li>HitmanPro will now begin to scan your computer for Web Surf Shield trojan.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5177\" title=\"HitmanPro scanning for Web Surf Shield virus\" alt=\"HitmanPro detecting for Web Surf Shield virus\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan.jpg\" width=\"497\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan.jpg 497w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan-300x237.jpg 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/li>\n<li>When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the <strong>Next<\/strong> button, to remove Web Surf Shield virus.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5178\" title=\"HitmanPro reporting scan results\" alt=\"HitmanPro scan results\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan-results.jpg\" width=\"497\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan-results.jpg 497w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-scan-results-300x237.jpg 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/li>\n<li>Click on the <strong>Activate free license<\/strong> button to begin the <strong>free 30 days trial<\/strong>, and remove all the malicious files from your computer.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5175\" title=\"HitmanPro free 30 days trial\" alt=\"[Image: HitmanPro 30 days activation button]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-activation.jpg\" width=\"497\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-activation.jpg 497w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/hitmanpro-activation-300x237.jpg 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/li>\n<\/ol>\n<hr \/>\n<h2 id=\"reset-browser\">TEP 6: Remove Web Surf Shield redirect from Internet Explorer, Firefox and Google Chrome<\/h2>\n<h3>Remove Web Surf Shield from\u00a0Internet Explorer<\/h3>\n<ol>\n<li>Open Internet Explorer, click on the <strong>gear icon\u00a0<\/strong><img decoding=\"async\" alt=\"[Image: icongear.jpg]\" src=\"\/\/malwaretips.com\/images\/removalguide\/icongear.jpg\" border=\"0\" title=\"\"> (<em>Tools<\/em> for Windows XP users)\u00a0at the top (far right), then click again on\u00a0<strong>Internet Options<\/strong>.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5216\" title=\"Internet Options in Internet Explorer\" alt=\"Internet Options in IE\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-internet-options.jpg\" width=\"512\" height=\"269\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-internet-options.jpg 512w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-internet-options-300x157.jpg 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/li>\n<li>In the <em>Internet Options<\/em> dialog box, click on the\u00a0<strong>Advanced<\/strong>\u00a0tab, then click\u00a0on the <strong>Reset<\/strong> button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5217\" title=\"Reset button in Internet Explorer\" alt=\"Reset Internet Explorer\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-reset.jpg\" width=\"338\" height=\"433\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-reset.jpg 338w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-reset-234x300.jpg 234w\" sizes=\"(max-width: 338px) 100vw, 338px\" \/><\/li>\n<li>In the <em>Reset Internet Explorer settings<\/em> section, check the <strong>Delete personal settings <\/strong> box, then click on\u00a0<strong>Reset<\/strong>.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5215\" title=\"Reset Internet Explorer to its default settings\" alt=\"Internet Explorer back to its default settings\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-default-settings.jpg\" width=\"368\" height=\"366\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-default-settings.jpg 368w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/ie-default-settings-300x298.jpg 300w\" sizes=\"(max-width: 368px) 100vw, 368px\" \/><\/li>\n<li>When Internet Explorer finishes resetting, click <strong>Close<\/strong>\u00a0in the confirmation dialogue box and then click\u00a0<strong>OK<\/strong>.<\/li>\n<li><strong>Close and open Internet Explorer<\/strong>.<\/li>\n<\/ol>\n<h3>Remove Web Surf Shield from Mozilla Firefox<\/h3>\n<ol>\n<li>At the top of the Firefox window, click the <strong>Firefox\u00a0button<\/strong>, go over to the\u00a0<strong>Help<\/strong>\u00a0sub-menu (on\u00a0<em>Windows XP<\/em>, click the\u00a0Help\u00a0menu at the top of the Firefox window), and select\u00a0<strong>Troubleshooting Information<\/strong>.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5213\" title=\"Troubleshooting Information in Firefox\" alt=\"Firefox Troubleshooting Information\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-options.jpg\" width=\"528\" height=\"216\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-options.jpg 528w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-options-300x122.jpg 300w\" sizes=\"(max-width: 528px) 100vw, 528px\" \/><\/li>\n<li>Click the\u00a0<strong>Reset Firefox<\/strong>\u00a0button in the upper-right corner of the <em>Troubleshooting Information<\/em> page.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5214\" title=\"Reset Firefox to its default settings\" alt=\"Firefox default settings\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-reset.jpg\" width=\"454\" height=\"182\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-reset.jpg 454w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/firefox-reset-300x120.jpg 300w\" sizes=\"(max-width: 454px) 100vw, 454px\" \/><\/li>\n<li>To continue, click\u00a0<strong>Reset Firefox<\/strong>\u00a0in the confirmation window that opens.<\/li>\n<li>Firefox will close and be reset. When it&#8217;s done, a window will list the information that was imported. Click <strong>Finish<\/strong><\/li>\n<\/ol>\n<h3>Remove Web Surf Shield from\u00a0Google Chrome<\/h3>\n<ol>\n<li>Click the Chrome menu\u00a0<img decoding=\"async\" class=\"alignnone size-full wp-image-4953\" title=\"Chrome menu button\" alt=\"Chrome menu\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/Chrome-button.png\" width=\"29\" height=\"29\" \/>\u00a0 button on the browser toolbar, select\u00a0<strong>Tools<\/strong>\u00a0and then click on\u00a0<strong>Extensions<\/strong>.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-5221\" title=\"Open Extensions tab in Chrome\" alt=\"Google Chrome Extensions\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/chrome-extensions.jpg\" width=\"517\" height=\"256\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/chrome-extensions.jpg 517w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/12\/chrome-extensions-300x148.jpg 300w\" sizes=\"(max-width: 517px) 100vw, 517px\" \/><\/li>\n<li>In the\u00a0<strong>Extensions<\/strong>\u00a0tab, remove <strong>Allyrics<\/strong>, <strong>Allyrics-1<\/strong>\u00a0and any other unknown extensions by clicking the trash can <img decoding=\"async\" class=\"alignnone size-full wp-image-9976\" title=\"Remove an extension from Chrome\" alt=\"[Image: Remove an extension from Chrome]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/07\/Trash-Can-Chrome.png\" width=\"20\" height=\"20\" \/> icon.<br \/>\nBasically, if you have not installed an extension, you should remove it from your web browser.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-14516\" title=\"Web Surf Shield Chrome extensions\" alt=\"[Image: Web Surf Shield Chrome extensions]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-Chrome-extensions.jpg\" width=\"656\" height=\"595\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-Chrome-extensions.jpg 656w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/11\/Web-Surf-Shield-Chrome-extensions-300x272.jpg 300w\" sizes=\"(max-width: 656px) 100vw, 656px\" \/><\/li>\n<\/ol>\n<hr \/>\n<h2 id=\"adwcleaner\">STEP 7: Remove Web Surf Shield adware with AdwCleaner<\/h2>\n<p>The AdwCleaner utility will scan your computer for Web Surf Shield malicious files that may have been installed on your computer without your knowledge.<\/p><div id=\"mwtad2342189466\" class=\"gas_fallback-ad_381404-ad_309691-placement_381406\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"8735619847\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol>\n<li>You can <strong>download AdwCleaner<\/strong> utility from the below link.<br \/>\n<strong><a href=\"https:\/\/toolslib.net\/downloads\/finish\/1\/\" target=\"_blank\" rel=\"noopener noreferrer\">ADWCLEANER DOWNLOAD LINK<\/a><\/strong> (<em>This link will automatically download AdwCleaner on your computer<\/em>)<\/li>\n<li>Before starting AdwCleaner, <strong>close all open programs and internet browsers<\/strong>, then <strong>double-click on the AdwCleaner icon<\/strong>.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-11124\" title=\"AdwCleaner Icon\" alt=\"[Image: AdwCleaner Icon]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-icon.jpg\" width=\"123\" height=\"140\" \/><br \/>\nIf Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.<\/li>\n<li>When the AdwCleaner program will open, click on the <strong>Scan<\/strong> button as shown below.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-11126\" title=\"Click on Scan button to search for Web Surf Shield infection\" alt=\"[Image: Adwcleaner Scan]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-scan.jpg\" width=\"530\" height=\"570\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-scan.jpg 530w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-scan-278x300.jpg 278w\" sizes=\"(max-width: 530px) 100vw, 530px\" \/><br \/>\nAdwCleaner will now start to search for Web Surf Shield malicious files that may be installed on your computer.<\/li>\n<li>To remove the Web Surf Shield malicious files that were detected in the previous step, please click on the <strong>Clean<\/strong> button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-11125\" title=\"Click on the Clean button to remove Web Surf Shield virus\" alt=\"[Image: AdwCleaner removing infections]\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-cleanup.jpg\" width=\"530\" height=\"570\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-cleanup.jpg 530w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/08\/adwcleaner-cleanup-278x300.jpg 278w\" sizes=\"(max-width: 530px) 100vw, 530px\" \/><br \/>\nAdwCleaner will now prompt you to save any open files or data as the program will need to reboot the computer. Please do so and then click on the <strong>OK<\/strong> button.<\/li>\n<\/ol>\n<hr \/>\n<p>Your computer should now be free of the Web Surf Shield infection. If your current anti-virus solution let this infection through, you may want to consider purchasing <strong>the PRO version of <a title=\"Malwarebytes Anti-Malware Pro\" href=\"http:\/\/malwaretips.com\/malwarebytes-pro\" target=\"_blank\" rel=\"noopener noreferrer\">Malwarebytes Anti-Malware<\/a><\/strong> to protect against these types of threats in the future, and perform regular computer scans with <strong>HitmanPro<\/strong>.<br \/>\nIf you are still experiencing problems while trying to remove Web Surf Shield from your machine, please start a new thread in our <strong><a title=\"Free Malware Removal Support\" href=\"http:\/\/malwaretips.com\/Forum-Malware-Removal-Assistance\" target=\"_blank\" rel=\"noopener noreferrer\">Malware Removal Assistance<\/a><\/strong> forum.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Web Surf Shield notification is a computer virus, which will block your from visiting Facebook, Google, Youtube and other websites, and instead it will display a fake error message asking you to complete a &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Remove Web Surf Shield virus (Removal Guide)\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/web-surf-shield-removal\/#more-14511\" aria-label=\"Read more about Remove Web Surf Shield virus (Removal Guide)\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":14514,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2728],"tags":[],"class_list":["post-14511","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trojans","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/14511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=14511"}],"version-history":[{"count":0,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/14511\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/14514"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=14511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=14511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=14511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}