ProtectSoldier with alias Protect Soldier Virus is another common fake security program that attempts to mislead people on the security status of the computer by fabricating virus scan results. ProtectSoldier detection is completely lies and was a tactic used by all rogue programs to encourage users into purchasing the licensed version of the fake software. Usual penetration of ProtectSoldier on to computers is by redirecting Internet browser to a fake security websites that will initiate an online virus scan. The site will prompt visitors to download the program in the assurance that detected threats will be removed. Innocent victims who follow this steps will be at the height of security risks not only for his computer but for the network environment. While inside the computer, ProtectSoldier tries to connect to a remote computer to download addition threats to be executed on the affected system.
What are the Symptoms of ProtectSoldier Infection?
Protect Soldier antivirus scan will be launched right after the successful installation.
It will modify Windows Registry and add the following entries:
- HKEY_LOCAL_MACHINE\SOFTWARE\ProtectSoldier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run “ProtectSoldier”
- HKEY_CURRENT_USER\Software\ProtectSoldier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\ProtectSoldier
Protect Soldier threat will drop the following malicious files:
- c:\Program Files\ProtectSoldier Software\ProtectSoldier
- c:\Program Files\ProtectSoldier Software\ProtectSoldier\ProtectSoldier.exe
- %UserProfile%\Desktop\ProtectSoldier.lnk
- %UserProfile%\Start Menu\Programs\ProtectSoldier.lnk
- c:\Program Files\ProtectSoldier Software
- c:\Program Files\ProtectSoldier Software\ProtectSoldier\Uninstall.exe
How to Remove ProtectSoldier Manually
1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.
How to Easily Remove Protect Soldier
1. Download and run Removal Tool to remove Protect Soldier
