ProtectSoldier and ProtectDefender
ProtectSoldier and ProtectDefender are nothing but a clone of rogue anti-virus program from a large family. Usually, computer users may be infected with fake anti-virus application such as ProtectSoldier if the pay a visit to illegal web site that employs a drive-by-download method to infect visitors. Through this malicious script, attackers can automate the download and installation of ProtectSoldier on visitor’s computer without user’s concern. Once completed, ProtectSoldier virus will modify various system settings to prevent the rogue programs removal. Among other steps it accomplishes are disabling of Windows functions like Task Manager, Registry Editor and Folder Options. Locally present anti-virus program can also be render useless by blocking its ability to launch and provide scan on the computer.
If victims found it difficult to remove this threat, they may have no other option but to purchase the program as suggested by malware authors. After all, this is the main intention for the creation of ProtectSoldier. Instead of getting hold of this useless software and waste your money with a worthless product, try the ProtectSoldier removal procedure as proposed on this page. This may not only remove ProtectSoldier and ProtectDefender virus, but other files associated with these rogue programs.
Screen Shot Image:
Technical Details and Additional Information:
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
Characteristics (Analysis)
Beware of fake security web sites and multimedia sites that prompt you to download any program. These are commonly the source of ProtectSoldier and ProtectDefender infection. Visitors may unintentionally download a Trojan that will install these rogue products.
These applications are capable of modifying system registry to prolong their existence. ProtectSoldier and ProtectDefender also manipulate the affected PC and perform other action that halts process of legitimate protection software.
Malware Behavior
This virus or rogue application as others prefer to call it, will display a bunch of fake security warnings to mislead people. The message purports to be part of Windows security center and contains alarming contents similar to the following:
Added Registry Entries:Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of ProtectSoldier and remove spyware threats from your PC.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ProtectSoldier" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProtectSoldier HKEY_CURRENT_USER\Software\ProtectSoldier HKEY_LOCAL_MACHINE\SOFTWARE\ProtectSoldierAssociated Files and Folders:
%UserProfile%\Desktop\ProtectSoldier.lnk %UserProfile%\Start Menu\Programs\ProtectSoldier.lnk C:\Program Files\ProtectSoldier Software C:\Program Files\ProtectSoldier Software\ProtectSoldier C:\Program Files\ProtectSoldier Software\ProtectSoldier\ProtectSoldier.exe C:\Program Files\ProtectSoldier Software\ProtectSoldier\Uninstall.exe
How to Remove ProtectSoldier and ProtectDefender
Boot Windows in Safe Mode With Networking
1. First thing to do is to reboot the computer in Safe Mode with Networking to avoid ProtectSoldier and ProtectDefender from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Please select Safe Mode with Networking.
- Windows will now start in Safe Mode.
Remove ProtectSoldier and ProtectDefender with MalwareBytes' Anti-Malware
2. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop or any location on your PC.
3. When finish downloading, double-click on the file mbam-setup.exe to install the application.
4. Follow the prompts and install with default configuration.
5. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
6. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
7. When finished updating, Malwarebytes' Anti-Malware will run. Select Perform full scan on main screen to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to ProtectSoldier and ProtectDefender.
10. Restart your computer.
Note: If ProtectSoldier and ProtectDefender prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.