Severity scale  
  (63/100)

Windows Privacy Counsel. How to Remove? (Uninstall Guide)

removal by - -   Also known as Windows Privacy Counsel | Type: Rogue Antispyware
12

Windows Privacy Counsel is a rogue anti-spyware application that attempts to convince PC users to purchase bogus software in order to remove supposedly found malware on their computers. Found infections do not even exist or sometimes scareware may report genuine Windows files as malicious which may mislead the user of the compromised computer and as a result he may remove Windows files making the whole system unstable. Once installed, this rogue anti-spyware program reports many false system security threats and randomly displays fake security warnings to make you think that your computer is infected with spyware, adware, Trojan Horses and other malicious software. Very often, fake security alerts look just like the real ones so it might be difficult to tell whether they are real or not. Cyber criminals promote their bogus software in various ways. They send spam emails that contain malicious links or attachments; they also spam blogs and forums with links to adult videos and pirated software. There are also fake pages containing exploits, fake torrent files, malicious banner advertisements and etc. Most of the time, scammers use drive-by downloads and exploit packs to infection computers.

When running, Windows Privacy Counsel disables Task Manager, Registry Editor and other system tools to make the removal more complicated. Of course, it blocks anti-virus and anti-spyware programs as well and security related websites too. Actually, this fake program blocks nearly all websites and each time displays fake messages claiming that most of the sites you are trying to visit contain malicious code or may redirect you to hacked websites. Here are some of these fake security alerts:

Warning! Spambot detected!
Attention! A spambot sending viruses from your e-mail has been detected on your PC.

Warning
Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

How to remove Windows Privacy Counsel?

As you can see, Windows Privacy Counsel is nothing more but a scam. It uses various misleading methods to trick you into purchasing the program. If you are reading this article, then your computer is probably infected with this rogue anti-spyware program. If you have already bought it then you should contact your credit card company and dispute the charges. To remove Windows Privacy Counsel from the system, please download and run an automatic malware removal tool give below..

The latest parasite names used by FakeVimes:
Windows Internet Guard, Windows Web Watchdog, Windows AntiBreach Patrol, Windows Antivirus Patrol, Windows Pro Defence Kit

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Privacy Counsel. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows Privacy Counsel. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2012-06-12 02:45)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-06-12 02:45)
Hitman Pro
Webroot SecureAnywhere AntiVirus
Windows Privacy Counsel screenshot
Windows Privacy Counsel snapshot

Windows Privacy Counsel manual removal

Kill processes:
Protector-[rnd].exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Unregister DLLs:
npswf32.dll

Delete files:
Protector-[rnd].exe
npswf32.dll

Information updated:

Comments on Windows Privacy Counsel

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)