Windows Turnkey Console. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Windows Turnkey Console | Type: Rogue Antispyware
12

Windows Turnkey Console is a rogue security program that displays fake security alerts and pop-ups on the compromised computer to make users think they are infected with malicious software, for example: adware, spyware, rootkits and trojans. It also pretends to scan the infected computer for malicious software and reports system security threats that do not even exist or may be genuine Windows system files. Do not follow on screen instructions outlined by this rogue anti-spyware program; otherwise you can seriously damage the system. Do not give any personal information to scammers, do not fill in any forms and most importantly, do not purchase this bogus security program.

It's promoted mostly via fake online virus scanners, infected websites and misleading ads. It may also be distributed via social networks and spam. Most of the time, the rogue program has to be manually installed, but sometimes it may be downloaded onto the infected computer using trojan downloaders and similar malware. One way or another, this rogue program should be removed from the infected computer as soon as possible. Also, it is very important to mention that this rogue security program may come bundled with more aggressive malware. For example, you may not be able to install genuine malware removal software and your search results might be redirected to malicious websites. Not necessary malicious but there will be at least several ads for sure.

While running, Windows Turnkey Console virus will block task manager and orher useful system utilities to make the removal process much more complicated. All atempts to open Task manager will trigger the reogue program and it will open its own process manager. Of course, it doesn't alow you to end malicious processes that would not make any sense. The payment page of this fake security program is also made to drive as much sales as it can, showing 30 days money return policy and huge discounts if you choose to purchase lifetime license.

Windows Turnkey Console shows alerts like these:

Warning
Firewall has blocked a program from accessing the InternetC:\program files\internet explorer\iexplore.exeis suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Error
Attempt to modify Registry key entries detected.Registry entry analysis recommended.

One more thing, the rogue program may be dropped with the rootkit infection. As you may know, such infections are sometimes difficult to remove. To remove all malware from your computer, please use malware removal software listed below. The most important part – do not pay for it; otherwise you will lose your money. Windows Turnkey Console will use various misleading methods to scare users into paying from malicious program. Instead of buying this software, please download and scan your computer with legitimate antimalware software listed below. It is very important to remove all malicious components of this malware.

So, to remove Windows Turnkey Console, please download an automatic removal tool give below and run a full system scan. Once the virus is gone, you should be able to use your antivirus once again. Sometimes, there might be certain registry keys and values left in the Windows registry that may prevent antivirus software from installing or running. It's a good idea to remove those registry keys and values using CCleaner or other registry cleaner of your choice.

The latest parasite names used by FakeVimes:
[newest]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Turnkey Console you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Turnkey Console. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Turnkey Console (2012-06-04)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Turnkey Console (2012-06-04)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Turnkey Console (2012-06-04)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Turnkey Console (2012-06-04)
Windows Turnkey Console snapshot
Windows Turnkey Console

Windows Turnkey Console manual removal:

Kill processes:
Protector-[random].exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsafwserv.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavastsvc.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavastui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsegui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsekrn.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsascui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore "DisableSR " = '1'

Delete files:
Protector-[random].exe

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author