My Security Wall is a renamed version of the well-known fake antivirus, Virus Doctor. It uses scare tactics to try and trick users into paying for the software. My Security Wall gets installed on a user’s system via Trojans and fake websites which claim to perform virus scans for free. Once installed, My Security Wall creates a number of harmless files on the system, which it later flags as dangerous viruses after performing fake scans of the system. It also generates fake warning pop-ups from the Windows taskbar claiming that the system is under threat, along with warnings that the computer is about to be hacked by an external source. Then this rogue software claims that the currently installed ‘trial’ version of My Security Wall is inadequate to remove the detected false ‘threats’, and urges the user to purchase a license for the ‘full’ version of My Security Wall. However, the so-called ‘full’ version of My Security Wall is just as incapable of removing the detected false ‘threats’ as the ‘trial’ version is.

The process of My Security Wall removal involves stopping of processes, unregistering of DLLs, deletion of files and folders and removal of registry entries.

File Removal Procedures

The first step in My Security Wall removal is to stop the following processes:

• MS339.exe
• ppal.exe
• kernel32.exe

Next, it is necessary to unregister the following DLLs:

• tempdoc.dll
• mozcrt19.dll
• sqlite3.dll
• exec.dll

The next step is to delete the following files and folders:

• C:\Documents and Settings\All Users\Application Data\117fc\MS339.exe
• c:\Documents and Settings\All Users\Application Data\MSEAIVCW
• c:\Documents and Settings\All Users\Application Data\MSEAIVCW\MSGWBQLMRPW.cfg
• c:\Documents and Settings\All Users\Application Data\117fc
• c:\Documents and Settings\All Users\Application Data\117fc\MSW.ico
• c:\Documents and Settings\All Users\Application Data\117fc\7463.mof
• c:\Documents and Settings\All Users\Application Data\117fc\mozcrt19.dll
• c:\Documents and Settings\All Users\Application Data\117fc\sqlite3.dll
• c:\Documents and Settings\All Users\Application Data\117fc\BackUp\Adobe Reader Speed Launch.lnk
• c:\Documents and Settings\All Users\Application Data\117fc\BackUp
• c:\Documents and Settings\All Users\Application Data\117fc\BackUp\Adobe Reader Synchronizer.lnk
• c:\Documents and Settings\All Users\Application Data\117fc\MSWSys
• c:\Documents and Settings\All Users\Application Data\117fc\MSWSys\vd952342.bd
• c:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Wall.lnk
• %UserProfile%\Application Data\My Security Wall
• %UserProfile%\Application Data\My Security Wall\cookies.sqlite
• %UserProfile%\Desktop\My Security Wall.lnk
• %UserProfile\Recent\ANTIGEN.tmp
• %UserProfile\Recent\dudl.sys
• %UserProfile\Recent\energy.drv
• %UserProfile\Recent\exec.dll
• %UserProfile\Recent\exec.drv
• %UserProfile\Recent\grid.drv
• %UserProfile\Recent\hymt.drv
• %UserProfile\Recent\kernel32.exe
• %UserProfile\Recent\pal.drv
• %UserProfile\Recent\PE.drv
• %UserProfile\Recent\ppal.exe
• %UserProfile\Recent\tempdoc.dll
• %UserProfile\Recent\tempdoc.drv
• %UserProfile\Recent\tjd.tmp
• %UserProfile%\Start Menu\My Security Wall.lnk
• %UserProfile%\Start Menu\Programs\My Security Wall.lnk
• c:\Program Files\Mozilla Firefox\searchplugins\search.xml

Once these steps have been completed, your file system is safe from My Security Wall.

Registry Removal Procedures

To ensure complete My Security Wall removal, the following keys and settings should also be deleted from the Windows registry:

• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “Build/13.00007″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “My Security Wall”
• HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
• HKEY_CLASSES_ROOT\xp_5f014.DocHostUIHandler

After you have completed the removal of these registry entries, your system is completely safe from My Security Wall. However, in order to make sure of this fact, it is recommended to conduct a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus.

Conclusion

Manual My Security Wall removal is not recommended for inexperienced users, as any mistake made due to inexperience could damage the integrity of the system. Inexperienced users are advised to use an online repair service such as www.onlinecomputerrepair.org or legitimate antivirus software for efficient My Security Wall removal.