Please make sure you know what you are doing before performing any of the instructions on this site. You maybe better off downloading a proven spyware scanner and let the program do the cleaning. You may need anti-virus software as well and please allow up to 10 hours to get your system back on its feet again. Please feel free to ask questions, tell us the problem and we will help for FREE. We also have a great selection of SPYWARE and VIRUS prevention software available to try.
Removal instructions for antispyware soldier:
Antispyware Soldier is a trojan that displays an icon in the system tray. This icon shows a message, which says that the compromised computer is infected with dangerous spyware parasites and asks the user to download and install a removal program, which actually is AntiSpyware Soldier, the same named corrupt illegally distributed spyware remover. Once the user clicks on that message, the trojan opens a web site distributing AntiSpyware Soldier. It may also try to download the application. The trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. Furthermore, it can secretly download from the Internet and install malicious parasites to the infected system. Antispyware Soldier automatically runs on every Windows startup.
Alias:
Unknown
Protect yourself from spyware and virus attacks PDF
Notes:
Stop processes:a.exe, antispysoldier.exe, officescan.exe, runsrv32.exe, smartdrv.exe, susp.exe, updwebmin.exe
Remove Registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunAdware.Srv32
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOncesrv32 spool service
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOncesrv32 spool service
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B53455DB-5527-4041-AC41-F86E6947AA47}
HKEY_CLASSES_ROOTAlxTB.BHO
HKEY_CLASSES_ROOTBridge.brdg
HKEY_CLASSES_ROOTDailyToolbar.IEBand
HKEY_CLASSES_ROOTDailyToolbar.SysMgr
HKEY_CLASSES_ROOTIEToolbar.AffiliateCtl
HKEY_CLASSES_ROOTjao.jao
HKEY_CLASSES_ROOToffice_pnl.office_panel
HKEY_CLASSES_ROOTPopup.HTMLEvent
HKEY_CLASSES_ROOTPopMenu.Menu
HKEY_CLASSES_ROOTPopup.PopupKiller
HKEY_CLASSES_ROOTurl_relpacer.URLResolver
HKEY_CLASSES_ROOTWStart.WHttpHelper
HKEY_CLASSES_ROOTWStart.WHttpHelper.1
HKEY_CLASSES_ROOTAppIDDailyToolbar.DLL
HKEY_CLASSES_ROOTAppIDWStart.DLL
HKEY_CLASSES_ROOTAppID{951B3138-AE8E-4676-A05A-250A5F111631}
HKEY_CLASSES_ROOTAppID{F6BDB4E5-D6AA-4D1F-8B67-BCB0F2246E21}
HKEY_CLASSES_ROOTCLSID{B53455DB-5527-4041-AC41-F86E6947AA47}
HKEY_CLASSES_ROOTInterface{900FBC20-6AEE-4E05-ABA9-AC46E309C029}
HKEY_CLASSES_ROOTTypeLib{8B076501-1D1B-4B26-9492-FDB8EEE00D7F}
HKEY_CURRENT_USERSoftwareMicrosoftIPCheck
HKEY_LOCAL_MACHINESOFTWAREDailyToolbar
HKEY_LOCAL_MACHINESOFTWARENIX SolutionsDailyToolbar
HKEY_LOCAL_MACHINESOFTWARERespondMiter
HKEY_LOCAL_MACHINESOFTWARESoftwareTPS108
HKEY_LOCAL_MACHINESOFTWARETransponder
HKEY_LOCAL_MACHINESOFTWAREWSoft
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallridge
Remove files:
alexaie.dll, alxie328.dll, alxres.dll, alxtb1.dll, bridge.dll, btgrab.dll, bz.dll, dailytoolbar.dll, dlmax.dll, jao.dll, office_pnl.dll, pynix.dll, questmod.dll, runsrv32.dll, smaexp32.dll, tcpservice2.exe, txfdb32.dll, udpmod.dll, winblsrv.dll, wstart.dll, zserv.dll, winlogon.ini
Remove directories:
C:Program FilesAntispyware SoldierC:Documents and Settings[Current User]Local SettingsApplication DataAntispywareSoldier
Additional:Exact file location:antispysoldier.exe, bz.dll - C:Program FilesAntispyware Soldiersusp.exe, alexaie.dll, alxie328.dll, alxtb1.dll, btgrab.dll, dlmax.dll, pynix.dll, zserv.dll - C:Windows or C:Winnta.exe, officescan.exe, runsrv32.exe, smartdrv.exe, updwebmin.exe, alxres.dll, bridge.dll, dailytoolbar.dll, jao.dll, office_pnl.dll, questmod.dll, runsrv32.dll, smaexp32.dll, tcpservice2.exe, txfdb32.dll, udpmod.dll, winblsrv.dll, wstart.dll, winlogon.ini - C:WindowsSystem, C:WindowsSystem32 or C:WinntSystem32Domain Name: ANTISPYWARESOLDIER.COM (216.195.35.105)Registrant:AntiSpyware CoalitionArtur Podlaski (admin@antispywaresoldier.com)str. Nowogrodzka 14Warszawanull, 00511, PLTel. +48.228253883Domain Name: ANTISPYNET.COM (85.255.118.98)Registrant:Michael BrownArtur Podlaski (michael.brown70@yahoo.com)Friedrich-Str. 10Dusseldorfnull, 40215, DETel. +561.4595318AVOID THESE DOMAINS AND THESE IPs! Better block them in your Hosts file. Antispyware Soldier: