ShieldSoldier Removal Guide

ShieldSoldier is a fake antivirus program that try to cheat the user to register the program so that to remove the malwares detected. When ShieldSoldier is accidentally installed into the computer, ShieldSoldier will start automatically when Windows boot. Then, it will scan the files in the computer and produce fake report that there are several malwares detected. ShieldSoldier will ask the user to register the program by purchasing the full version of ShieldSoldier in order to remove all the malwares. In fact, ShieldSoldier cannot detect any malware and also remove and malwares.

ShieldSoldier also install RegistryClever into the computer which is also another program created to trick the user to waste money. It claims that it can help protect your PC and give Realtime protection. However, all of these are fake features.

ShieldSoldier should be removed immediately!

ShieldSoldier Removal Guide
Kill Process
(How to kill a process effectively?)
F0E84.exe
RegistryClever.exe
RegistryCleverTray.exe
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_CURRENT_USER\Software\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

Remove Folders and Files
%ALLUSERSPROFILE%\Desktop\RegistryClever.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\ShieldSoldier.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\RegistryClever
%ProgramFiles%\FDFCA
%ProgramFiles%\RegistryClever Software
%windir%\[random].dll
%windir%\[random].bin
%windir%\[random].cpl
%windir%\system32\[random].cpl
%windir%\system32\[random].exe
%windir%\system32\[random].bin
%UserProfile%\Desktop\ShieldSoldier.lnk
%UserProfile%\Local Settings\Temp\[random].exe