A new virus called Security Shield has recently infected thousands of users and their contacts in their address books.
When you open the message it has a link to a URL and attempts to download a file called surprise.exe
Surprise.exe is a malware file that appears to be a legitimate anti-virus warning, but actually performs multiple tasks on your PC, including forwarding itself to your contact list, as well as possibly logging your keystrokes and thus potentially capturing your passwords and banking details, as well as providing access to your disk drive to external users.
It also asks you to “click here to remove…” or similar instructions. DO NOT DO THIS.
If your PC DOES become infected, you may be able to remove this program by running a full scan of your computer with your existing Anti-Virus program, followed by a full malware scan.
You may then be able to remove the “Security Shield” program from your program list.
If you require assistance in removing the virus please contact us on 1300 867 867.
ENSURE YOUR CURRENT ANTIVIRUS AND ANTI-MALWARE PROGRAMS ARE UP TO DATE, AND THAT YOU HAVE A CURRENT FULL BACKUP OF YOUR PCs AND SERVERS.
TNS recommends StorageCraft’s “Shadow Protect” as one of the best backup program for PCs at present – call us for more information on this.