Threat Database Browser Hijackers Soldierantivirus.com

Soldierantivirus.com

Soldierantivirus.com is a browser hijacker that is involved in the distribution of the fake security software called Security Tool. With the help of Trojans, Soldierantivirus.com is inserted into victims' Hosts files thus causing their browsers to be frequently redirected to Soldierantivirus.com. Once a user is on Soldierantivirus.com, a bogus online system scan, security alerts and annoying pop-ups will be displayed in order to convince the user that his/her system is infected. The victim will then be prompted to purchase the "licensed version" of Security Tool. Should you encounter Soldierantivirus.com, you should scan your system with a legitimate security tool and remove all detected malware.

File System Details

Soldierantivirus.com may create the following file(s):
# File Name Detections
1. %UserProfile%\Application Data\[randomnumbers]\[randomnumbers].exe
2. %UserProfile%\Application Data\[randomnumbers]\[randomnumbers].bat
3. %UserProfile%\Start Menu\Programs\Security Tool.lnk
4. %UserProfile%\Desktop\Security Tool.lnk
5. %UserProfile%\Application Data\[randomnumbers]\[randomnumbers].cfg

Registry Details

Soldierantivirus.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random numbers].exe"
HKEY_CURRENT_USER\Software\Security Tool

Trending

Most Viewed

Loading...