Are you worried about the alerts from Windows Defense Counsel that your computer is infected? Windows defense counsel pretends to be a reputable program that will protect your computer from any infections, but in reality, it is just a joke. Moreover, it is not even capable to detect any real infection, let alone removing it. This program creates problems by automatically downloading malwares on your system. It blocks other applications, including reputable antivirus programs and also disables internet connection. Hence, it makes your computer helpless to many other infections. It is very dangerous as some of the malwares don’t have symptoms and it is very hard to detect them. If you have detected the symptoms of windows defense counsel, the only wise decision is to remove it as soon as possible as it badly damages your system.

Installation of this program is similar to any other ordinary application. Basically, it infects your system by the attack of Trojans.  Your computer gets infection if you download its executable file from fake scanner that afraid you about infections on your computer without actually scanning it. This malware might be installed through other parasites as well. After complete installation, its scanner keeps running and warns about various infections noticed on your computer. It displays dozens of alerts and warnings about infection in your computer, which are all false anyways. Some of the most common warnings by Windows Defence Counsel are:

Warning! Virus detected

threat detected: Net –Worm                                                                                                                                       security risk: ……                                                                                                                                                                              infected file : C:/windows /system32/ ipxmontr.dll                                                                                             description: program classified as Trojan download and install new version of malicious programs, including Trojans and adware on victims computers.                                                                                           Recommended: Please click ‘’Remove All” button to erase all infected files and protect your PC.

Remove Windows defense counsel processes

  1. Open Windows task manager by pressing ALT+CTRL+DEL.
  2. Find the process Protector-[rnd].exe.
  3. Select it and then press Delete.

Remove Windows defense counsel Registry Entries

  1. Open Registry editor and find out the following entries by searching them.
  2. The Windows defense counsel registry files you need to find are:

HKEY_CURRENT_USER\Software\Microsoft \Windows \CurrentVersion\Run\ Inspector = %AppData%\Protector-[random].exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\a.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\aAvgApi.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\AAWTray.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\About.exe \ Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\ackwin32.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\Ad-Aware.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\adaware.exe  \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\advxdwin.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\AdwarePrj.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\agent.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\agentsvr.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\agentw.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\alertsvc.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\alevir.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft \Windows NT \CurrentVersion\Image File Execution Options\alogserv.exe \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft\Windows NT \ CurrentVersion\Image File Execution Options\AlphaAV \Debugger = svchost.exe

HKEY_LOCAL_MACHINE\software\microsoft\Windows NT \CurrentVersion\Image File Execution Options\AlphaAV.exe \Debugger = svchost.exe

Remove Windows defense counsel files

  1. Open search and enter the following file name to delete them.
  2. The Windows defense counsel file names you need to search are:

%AppData %\ Protector- [random 3 chars] .exe

%AppData %\ Protector- [random 4 chars] .exe

%AppData % \result.db

 

How to Remove Windows Defense Counsel?

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>