Trust Soldier
Trust Soldier also known as TrustSoldier virus is a new breed of malware from the same developer who spread other unwanted programs such as SafeFighter, TrustCop and SecureWarrior. These programs were created in the sole purpose of making money out of unscrupulous online transactions. These programs were sold in the same manner as other legit antivirus program in the market. However, TrustSoldier’s marketing strategy was far more different. It uses dirty tactics to mislead users and pay for the program.
Trust Soldier will display numerous fake alert messages and computer threats even though none was found. This fake detected by Trust Soldier was created to force users into purchasing the licensed version of the program. So many have been a victim of this scam. Please be aware that before downloading or purchasing certain programs, one must search the Internet on its capability, effectively and popularity.
| Type | Rogue |
| Sub-Type | FakeAV |
| Aliases | |
| OS Affected | Windows |
| Detected By | MalwareBytes |
What are the Symptoms of Trust Soldier Infection?
This malware will scan computer after installation.
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “TrustSoldier”
- HKEY_CURRENT_USER\Software\TrustSoldier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\TrustSoldier
- HKEY_LOCAL_MACHINE\SOFTWARE\TrustSoldier
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAFEFIGHTERSVC
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustSoldierSvc
The threat will drop the following malicious files:
- %Documents and Settings%\All Users\Desktop\Safe Fighter.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\TrustSoldier\1 Trust Soldier.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\TrustSoldier\2 Homepage.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\TrustSoldier\3 Uninstall.lnk
- %Program Files%\Trust Soldier Software\Trust Soldier\license.txt
- %Program Files%\Trust Soldier Software\Trust Soldier\TrustSoldier.exe
- %Program Files%\Trust Soldier Software\Trust Soldier\uninstall.exe
- %WINDOWS%\[Random].cpl
- %WINDOWS%\[Random].dll
How to Easily Remove TrustSoldier
1. Print this procedure as we need to close all programs running later.
2. Download AntiMalware Application here and save it to your Desktop.
3. Close all open applications.
4. Double-Click on the downloaded mbam-setup.exe to start the installation. If unable to execute, infections on computer is preventing it from running, rename the file mbam-setup.exe to anything (like myfile.exe)
5. Run the installation on the default settings. No changes are necessary.
6. Just before completing the installation, make sure that the following are marked check.
- Update the program
- Launch the program
7. The tool will run and update itself after installation. Close it after the update.
8. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode
9. Click on the icon and start to Perform Full Scan to begin scanning your computer for Trust Soldier related files.
10. After scanning, a message will appear stating that the scan is completed successfully. Click OK.
11. Click Show Results and detected threats will be displayed.
12. Make sure that all threats are marked check, then click Remove Selected to begin removal of the malicious files.
13. Exit AntiMalware Apps and restart your computer.
14. Trust Soldier and all its files are now removed from your computer. To guard your computer from this threat and avoid future infections, you may want real-time protection from a full version of anti-malware program..
Cyber Protection Center Windows Enterprise Defender