Save Soldier

Save Soldier is a fake spyware remover promoted through the use of Trojans and fake online anti-malware scanners. Once installed, Save Soldier generates fictitious and sometimes grossly exaggerated scan results along with fabricated security alerts, all in order to fool you into thinking your PC is infected. You are then prompted to purchase and download the full version of Save Soldier to combat these imaginary threats.

File System Modifications

• The following files were created in the system:
  

  #	File Name
  1	c:\Documents and Settings\All Users\Start Menu\Programs\SaveSoldier
  2	c:\Program Files\SaveSoldier Software
  3	c:\Program Files\SaveSoldier Software\SaveSoldier

Registry Modifications

• The following newly produced Registry Values are:
  HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveSoldier"HKEY_CURRENT_USER\Software\SaveSoldierHKEY_LOCAL_MACHINE\SOFTWARE\SaveSoldierHKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveSoldierSvcHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveSoldierSvcHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SaveSoldier