Shield Soldier
Shield Soldier is a rogue anti-spyware application designed to swindle victims out of their money. Shield Soldier aka ShieldSoldier typically spreads via Trojans and malicious websites. Once Shield Soldier has penetrated a system it will display all types of security alerts in order to convince a victim that his/her system is infected with malware. Then the victim will be prompted to purchase the supposed full version of Shield Soldier to remove the purportedly detected threats. This is just another scam that users should ignore. Instead use a recognized and reliable security tool to remove Shield Soldier from your system as soon as possible.
File System Details
Shield Soldier may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | c:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe | |
| 2. | c:\WINDOWS\.dll | |
| 3. | c:\Program Files\FDFCA\Uninstall.exe | |
| 4. | c:\Program Files\RegistryClever Software\RegistryClever\uninstall.exe | |
| 5. | %UserProfile%\Local Settings\Temp\.exe | |
| 6. | c:\Program Files\FDFCA\F0E84.exe | |
| 7. | c:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe | |
| 8. | c:\WINDOWS\system32\.exe | |
| 9. |
C:\Documents and Settings\ |
|
| 10. |
C:\Documents and Settings\ |
|
| 11. | c:\Program Files\RegistryClever Software\RegistryClever\ | |
| 12. | c:\Program Files\RegistryClever Software\RegistryClever\Styles\Vista.cjstyles | |
| 13. | c:\WINDOWS\system32\.cpl | |
| 14. |
C:\Documents and Settings\ |
|
| 15. |
C:\Documents and Settings\ |
|
| 16. | c:\Program Files\RegistryClever Software\ | |
| 17. | c:\Program Files\RegistryClever Software\RegistryClever\Styles\ | |
| 18. | c:\WINDOWS\.cpl | |
| 19. | %UserProfile%\Desktop\ShieldSoldier.lnk | |
| 20. |
C:\Documents and Settings\ |
|
| 21. |
C:\Documents and Settings\ |
|
| 22. | c:\Program Files\FDFCA\ | |
| 23. | c:\Program Files\RegistryClever Software\RegistryClever\license.txt | |
| 24. | c:\WINDOWS\.bin | |
| 25. | c:\WINDOWS\system32\.bin |
Registry Details
Shield Soldier may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"
HKEY_CURRENT_USER\Software\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
