Quick note, my computer got hit with that Service Shield virus (I think that's what it's called) - it prompts you to purchase an anti-virus program, but gives no way to remove the 'trial version', and in the meantime it prevents you from opening any program, claiming the files are corrupted. If you or anyone you know has gotten infected -- don't believe the corrupted files warning and don't purchase the program! It's a scam, to be sure - fortunately, I didn't go the ransom route. After many attempts, I figured out A) how to get rid of it and B) why my current anti-virus didn't detect it.
It won't be detected as it isn't exactly a virus.. it's a program. To remove it (for windows XP anyway), reboot your computer and as soon as windows loads, right click the Taskbar at the bottom and open Task Manager. Go to the Processes tab and find a program listed that is a bunch of jumbled letters that look something like fhqwgads and end the process as quick as possible before it can take effect. If you have a lot of programs that load with the startup, it might be a problem.
After you've ended the process, open regedit and go to Current User -> Software -> Microsoft -> Windows -> CurrentVersion -> Run --- there you'll find the program listed to startup with the computer. Remove that, but also take note of the extra info of the program's location. It should be located in the Users->(Name)->Appdata->Local folder in a directory with another jumbled mess for a name. Delete that folder and you're rid of the program. The main trick is catching Task manager at the start and ending the process.
It'll mess with your internet proxy, too. I just set it to auto-detect.
* Garrett Blair official website - [link]
* Commission types and prices - [link]
* Garrett Blair Online Store - [link]
* My eBay auctions - [link]
* GB2K on MySpace - [link]
* Garrett Blair Google Group - [link]