Monday, June 11, 2012

Windows Privacy Counsel virus. The removal guide.

Windows Privacy Counsel is a brand new virus inside the web that can easily infect your system and get your money for its malicious program. How exactly can it do that? When Windows Privacy Counsel penetrates into your system it automatically begins to scan it and provides you with list of fake threats. In general, it tries to convince you that it is safe and you have nothing to worry about.

But we know for sure its true nature.It wants only one thing from you - your money. And it will do anything to get it. So, you should be twice as careful than always.

We recommend you to eliminate the virus from your system as soon as possible. Here you can download our anti-malware program GridinSoft Trojan Killer.  This program will definitely help you to get rid of the threat.

Windows Privacy Councel malware remover:

Windows Privacy Counsel automatic remover:

malware removal tool

  • Upon detection of viruses click Remove Selected. Reboot your computer if prompted.
  • Similar video guide at our Youtube channel:

    Windows Privacy Counsel manual remover:

    Delete Windows Privacy Counsel files:
      Protector-[rnd].exe in %AppData% folder
    Delete Windows Privacy Counsel registry entries:
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
    • Inspector = %AppData%\Protector-[random].exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\a.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\aAvgApi.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe\Debuger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File ExecutionOptions\ackwin32.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdAware.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File ExecutionOptions\advxdwin.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image FileExecutionOptions\AdwarePrj.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File ExecutionOptions\agentsvr.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agentw.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File ExecutionOptions\alertsvc.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\alevir.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File ExecutionOptions\alogserv.exe\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\Debugger = svchost.exe
    • HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\Debugger = svchost.exe

    No comments:

    Post a Comment