Severity scale:  

Windows Defence Counsel. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsDefenceCounsel | Type: Rogue Antispyware

Windows Defence Counsel is a rogue anti-spyware program that displays fake security alerts and pop-ups claiming that your computer is infected with malicious software. In other words, it just want to make you think that your computer is infected and then trick you into paying for a full version of the this bogus program in order to remove supposedly found malware infections or system security threats that actually do not even exist. Just like all other rogue programs, Windows Defence Counsel is promoted via Trojans and software vulnerabilities, or at least most of the time it's trojan downloaders that push this malware. Once installed, it will display fake security alerts and notifications from system tray claiming Windows Defence Counsel has detected some serious threats that can harm your computer. It may also claim that Trojan viruses can steal your passwords and even identity or delete files. Don't pay for this rogue anti-spyware program. Windows Defence Counsel is a scam and nothing more. Instead, please remove this rogue program from your computer upon detection using the removal guide below in combination with legitimate malware removal software. You can remove it either manually or with an automatic removal tool.

When running, Windows Defence Counsel may block some security websites and legitimate anti-virus software in order to protect itself from being removed. As for fake security alerts, Windows Defence Counsel displays mostly alerts claiming that your computer is under attack from a remove server. It's completely false. Just like the false scan results, it should be ignored.

Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

As you can see, Windows Defence Counsel is absolutely useless and fake software. In other words, it's a scam. Don't delay and remove it from your computer as soon as possible uisng legitimate anti-malware software. Also note that this malware can download and install additional malware so we highly recommend you to run a full system scan with an automatic remove tool listed below.

The latest parasite names used by FakeVimes:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Defence Counsel you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Defence Counsel. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Windows Defence Counsel snapshot
Windows Defence Counsel

Windows Defence Counsel manual removal:

Kill processes:

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsafwserv.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavastsvc.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavastui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsegui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsekrn.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsascui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore "DisableSR " = '1'

Delete files:

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions