Thursday, October 7, 2010

Remove ShieldSoldier as another Wini Quick Release

ShieldSoldier (Shield Soldier) is another private in the army of Wini rogue antispyware. Frequency of rogue antispyware release by the hackers maintaining and developing the family leaves no chance for other malware families to level quantity of its members with numerous counterfeits of this family. Get rid of ShieldSoldier as this program tries to dupe its users. Moreover, it lures them to delete pretty harmless files as it lists them as viruses in its scan table. 
The rogue generates numerous and various reports. Some of them are action based, e.g. when showing alert that titled as follows:
“Reported Insecure Browsing: Navigation blocked”
the malware actually blocks web-navigation.
Click here to perform ShieldSoldier removal and navigate through the Internet the way you like watching no more misleading reports. 

ShieldSoldier screenshot:


ShieldSoldier removal tool:


ShieldSoldier manual removal guide:

Delete ShieldSoldier files:
c:\Documents and Settings\All Users\Desktop\RegistryClever.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\ShieldSoldier.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\
c:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\RegistryClever.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\Uninstall.lnk
c:\Program Files\FDFCA\
c:\Program Files\FDFCA\F0E84.exe
c:\Program Files\FDFCA\Uninstall.exe
c:\Program Files\RegistryClever Software\
c:\Program Files\RegistryClever Software\RegistryClever\
c:\Program Files\RegistryClever Software\RegistryClever\license.txt
c:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe
c:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe
c:\Program Files\RegistryClever Software\RegistryClever\uninstall.exe
c:\Program Files\RegistryClever Software\RegistryClever\Styles\
c:\Program Files\RegistryClever Software\RegistryClever\Styles\Vista.cjstyles
c:\WINDOWS\.dll
c:\WINDOWS\.bin
c:\WINDOWS\.cpl
c:\WINDOWS\system32\.cpl
c:\WINDOWS\system32\.exe
c:\WINDOWS\system32\.bin
%UserProfile%\Desktop\ShieldSoldier.lnk
%UserProfile%\Local Settings\Temp\.exe
Delete ShieldSoldier registry entries:
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_CURRENT_USER\Software\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

No comments: