Monday, June 11, 2012

Removal of Windows Privacy Counsel malware: GUI of system utility veils a virus

Windows Privacy Counsel is a product of hackers. Its GUI is made to cheat people as the interface of security solution conceals a virus.
Remove Windows Privacy Counsel as the program is another counterfeit that belongs to notorious family of malware. If you merely try ignoring the threat, endless flow of popups will be continuously annoying you and eventually block your desktop as frequency of the alerts by the fake is growing from the moment of its installation.
Besides, the adware kills essential system processes and processes executed by other applications. As a result, user of a computer infected by the malware experiences regular failures of system tasks and legit applications.
Get rid of Windows Privacy Counsel and real viruses as detected by free scanner. Ignore the parasites reported by the fraudware as those are but intentional false positives. 

Windows Privacy Counsel screenshots:



Windows Privacy Counsel activation code (helps removal):
0W000-000B0-00T00-E0020
NOTE: "Activating" Windows Privacy Counsel  is not enough. You need to remove related trojans \ rootkits using reliable malware removal solution.
It is important to fix Windows registry after Windows Privacy Counsel malware removal using safe registry cleaner software.

Windows Privacy Counsel manual removal guide:
Delete infected files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[random 3 characters].exe
%AppData%\Protector-[random 4 characters].exe
%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Privacy Counsel.lnk
%Desktop%\Windows Privacy Counsel.lnk
Delete Windows Privacy Counsel registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[random].exe

No comments: