SoftStronghold Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCart

SoftStronghold is a vicious rogue anti-spyware program that comes from the group of fake security programs known as WiniGuard, Soft Cop, Soft Soldier, TRE Antivirus and others. SoftStronghold is usually installed without permission through the use of a Trojan that pretends to be a video codec or flash player update.

Once SoftStronghold is installed onto a PC, then it can start to initiate system scans that display fake results all in an effort to get computer users to purchase a full version of SoftStronghold. SoftStronghold is not effective for the tasks of detecting and remove spyware parasites.

Type: Rogue AntiSpyware Programs

How Can You Detect SoftStronghold?

SoftStronghold Technical Report

As new SoftStronghold details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following SoftStronghold files with its MD5s were created in the system:

SoftStronghold has typically the following processes in memory:

• C:\WINDOWS\10246h9zktool4d5.exe
• C:\WINDOWS\system32\205z0sp95ad.exe
• SoftStronghold.exe
• C:\Program Files\SoftStronghold Software\SoftStronghold\uninstall.exe
• C:\WINDOWS\system32\20151worm9z4.ocx
• %Temp%\akx4.tmp.exe
• C:\Program Files\SoftStronghold Software\SoftStronghold\SoftStronghold.exe
• C:\WINDOWS\1045ztroj92a.ocx
• C:\WINDOWS\system32\2069sz5mbot179.dll

SoftStronghold creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftStronghold
• SoftStronghold
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SoftStronghold”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “akx4.tmp.exe”
• HKEY_CURRENT_USER\Software\SoftStronghold
• HKEY_LOCAL_MACHINE\SOFTWARE\SoftStronghold

Important Article Disclaimer