My Security Engine Descriptions:
My Security Engine, or MySecurityEngine, is a newly-created rogue anti-spyware application from the same family as CleanUp Antivirus. Usually without your knowledge and notice, My Security Engine steals into your PC and starts hijacking it step by step.
After changing PC configurations in the registry, My Security Engine is launched automatically as you boot Windows up. So every time you turn your PC on, your machine will be crowded with fake scans which will be followed by threat warnings. All of this will lead you to some GUIs or websites where you will be asked to fill in the form and register for a fee to purchase My Security Engine.
My Security Engine is not only trying to steal your money but it also aims to decrease the functions of your PC. Be sure you remove the fake soft as soon as you notice it on your personal computer.
Detect and Remove MY SECURITY ENGINE – Download SpyHunter* Spyware Detection Utility
My Security Engine Manual Removal Instructions:
Stop These My Security Engine Processes:
(Learn how to do this)
MS345d.exe
Find and Delete These My Security Engine Files:
(Learn how to do this)
c:\Documents and Settings\All Users\Application Data\345d567\MSESys\
c:\Documents and Settings\All Users\Application Data\345d567\MSESys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items
c:\Documents and Settings\All Users\Application Data\MSHOLE\
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\2322.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\MS345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\MSE.ico
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\MSHOLE\MSJKEJCCE.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Engine.lnk
%UserProfile%\Application Data\My Security Engine\
%UserProfile%\Application Data\My Security Engine\cookies.sqlite
%UserProfile%\Application Data\My Security Engine\Instructions.ini
%UserProfile%\Recent\gid.dll
%UserProfile%\Recent\kernel32.sys
%UserProfile%\Recent\kernel32.tmp
%UserProfile%\Recent\pal.dll
%UserProfile%\Desktop\My Security Engine.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\exec.drv
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\ppal.drv
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\SICKBOY.sys
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\My Security Engine.lnk
%UserProfile%\Start Menu\Programs\My Security Engine.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
Remove These My Security Engine Registry Values:
(Learn how to do this)
HKEY_CLASSES_ROOT\MS345d.DocHostUIHandler
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” =”http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “My Security Engine”
Detect and Remove MY SECURITY ENGINE – Download SpyHunter* Spyware Detection Utility
No related posts.
















HELP!
I got hit by this crazy “My Security Engine” attack. Stopped immediately and ran the MalWare software. It detected 69 Registry Keys invected. I selected remove and they were removed (I THINK!)
HOWEVER: I still have the shortcut on my desktop. AND I still have a file that I believe is the file My Security Engine File. It is MSAC03.EXE-2C98D585.pf I right clicked on the shortcut, chose properties, and got this under target: MSac03.exe
I ran MSac03.exe though my search software and found that this file is on my computer: MSAC03.EXE-2C98D585.pf
Can I just right click on that file (MSAC03.EXE-2C98D585.pf)and choose delete?
HELP?
Thanks
Dave
760-432-8115
hi me too hit with the same problem please advise