Title: ShieldSoldier

Type: Rogue Antispyware

Also known as: Shield Soldier

Remove ShieldSoldier
Removal instructions

Severity scale:

(66 / 100)

ShieldSoldier is a rogue anti-spyware program from the same family as IronProtector. It's installed through the use of Trojans and fake online anti-malware scanners. The rogue program has to be manually installed but in some cases Trojans may download and install ShieldSoldier onto your computer without your knowledge and permission. Trojans drop many harmless files onto your computer that later will be detected as malware by ShieldSoldier. Then it will state that you have to purchase the program in order to remove found infections from your computer. This fake program is nothing more but a scam. It won't remove any infections and it will give you a false sense of security if you choose to purchase. That's why you should remove ShieldSoldier from your computer as soon as possible. If your computer is infected please use the removal instructions below to remove this malware either manually or with an automatic removal tool.

Shield Soldier comes bundled with RegistryClever which is also a rogue program. While the rogue program is running you will also see a fake Windows Security Center window appear on your desktop. It will also display fake security alerts and warnings on your computer that state that you are sending sensitive data to a remote location or that an active malware infections has been found. Here's an example of the fake alert that this rogue will display:

Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of ShieldSoldier and remove spyware threats from your PC.

Last, but not least, ShieldSoldier will hijack Internet Explorer so that it displays warning messages when you browse the web. This message will claim that your computer can easily get infected with viruses due to insecure Internet browsing. The warning message that you will see is:

Reported Insecure Browsing: Navigation blocked
Insecure Internet activity. Thread of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes, and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register ShieldSoldier. We recommend you to protect your PC now continue safe Internet Browsing.

As you can see, ShieldSoldier was created for one purpose; to trick you into thinking your computer is infected so that you then purchase the program. Don't purchase this program. If you have already bought it then contact your credit card company and dispute the charges. Then please use the removal instructions below to remove ShieldSoldier from your computer manually for free or using an automatic removal tool.

Related files: [random].cp, [random].bin, [random].dll, RegistryCleverTray.exe, RegistryClever.exe, license.txt, Uninstall.exe, F0E84.exe, uninstall.lnk, Homepage.lnk, ShieldSoldier.lnk, RegistryClever.lnk

ShieldSoldier properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

ShieldSoldier snapshot:

Automatic ShieldSoldier removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove ShieldSoldier you agree to our privacy policy and agreement of use.

remover for ShieldSoldier

SpyHunter is recommended remover to uninstall ShieldSoldier. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of ShieldSoldier and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove ShieldSoldier using SpyHunter please report this to us.

Malwarebytes Anti Malware

Download | review

Tested and Confirmed! Malwarebytes Anti Malware removes ShieldSoldier (2010-10-07 08:39:32)

STOPzilla

Download | review

Tested and Confirmed! STOPzilla removes ShieldSoldier (2010-10-07 08:39:32)

Spyware Doctor

Download | review | tutorial

We are testing Spyware Doctor's efficiency at removing ShieldSoldier (2010-10-08 05:11:50)

XoftSpySE Anti Spyware

Download | review

ShieldSoldier manual removal:

FORUM:
Discuss ShieldSoldier in
spyware removal forum

Kill processes:
F0E84.exe
Uninstall.exe
RegistryClever.exe
RegistryCleverTray.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_CURRENT_USER\Software\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever\
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

HELP:
how to remove registry entries

Delete files:
RegistryClever.lnk
ShieldSoldier.lnk
Homepage.lnk
Uninstall.lnk
F0E84.exe
Uninstall.exe
license.txt
RegistryClever.exe
RegistryCleverTray.exe
[random].dll
[random].bin
[random].cp

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\RegistryClever Software\RegistryClever\
C:\Program Files\RegistryClever Software\
C:\Program Files\FDFCA\
C:Documents and Settings\All Users\Start Menu\Programs\RegistryClever\

Phone Support to remove ShieldSoldier

QR code for ShieldSoldier removal instructions:

QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like ShieldSoldier are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall ShieldSoldier right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

SYMPTOMS OF rogue antispyware INFECTION

Rogue AntiSpyware virus enters your PC without your consent or using some sort of social engineering trick. Fake scanner pages, malicious mail attachments or system vulnerabilities are often used.

Virus has a single goal: to gain money. Like other rogue anti-spyware applications, it will try to convince you that your system is infected with multiple parasites: trojans, adware, or other rogues. Typically, rogues do not provide enough detail about infections detected or show fake results. Rogue anti-spyware like ShieldSoldier will not clean any actual infections for free.

Most of the parasites of this type do not have parasite detection engine thus every warning they show is a random one. If you see persistent popups or alerts, you can safely discard them.

You should never pay for Rogue Anti-spyware application like ShieldSoldier as it funds development of other computer parasites.

Information added: 2010-10-07 08:39:32
Information updated: 2010-10-08 02:34:35

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about ShieldSoldier parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.

Remove ShieldSoldier Removal instructions

Automatic ShieldSoldier removal:

ShieldSoldier manual removal:

QR code for ShieldSoldier removal instructions:

SYMPTOMS OF rogue antispyware INFECTION

Additional resources: