Windows Defence Counsel

Windows Defence Counsel Description


Windows Defence Counsel Screenshot 1Although Windows Defence Counsel has a plethora of security-related popups, system scans and diagnoses on call, SpywareRemove.com malware researchers recommend that you ignore Windows Defence Counsel’s advice, since Windows Defence Counsel has been confirmed as a fraudulent anti-malware product. Due to Windows Defence Counsel’s inability to defend your computer from real PC threats, following security-related information from Windows Defence Counsel risks causing harm to your operating system, just as purchasing Windows Defence Counsel will similarly damage your bank account without any positive results. Even merely allowing Windows Defence Counsel to remain on your PC can result in exposure to unwanted browser redirects and interference with genuine security and anti-virus products, and for these reasons it’s always recommended that you delete Windows Defence Counsel and related PC threats once you can scan your hard drive with appropriate anti-malware software.

Why You Should Turn Your Ear Away from Windows Defence Counsel’s Computer Security Advice


Windows Defence Counsel is verified as just another copy-and-paste member of FakeVimes, a classification for related scamware anti-malware products, with recent members being particularly similar in appearance and functionality. Other variants of FakeVimes that bear a strong resemblance to Windows Defence Counsel, although this list is far from conclusive, include Windows Sleek Performance, Windows Debug Center, Windows Defending Center, Windows Active Guard, Home Safety Essentials, Windows Security System, XP Smart Security, Windows Internet Booster, Smart Virus Eliminator, Windows Basic Antivirus, PrivacyGuard PRO, Smart Security, System Protection Tools, Personal Security Sentinel, Antivirus Smart Protection, Windows Ultimate Security Patch, Fast Antivirus 2009, Windows Safeguard Upgrade, Windows Stability Guard, Windows Privacy Counsel, Keep Center Keeper, Home Malware Cleaner, Windows Personal Doctor, Windows Premium Guard, Windows Trouble Taker, Windows Warding System, Windows Safety Maintenance, Windows Antivirus Rampart, Windows Antivirus Machine, Windows No-Risk Center, Total Anti Malware Protection, Windows Pro Defence, Windows Guardian Angel, Windows Process Director, Windows Safety Module, Best Antivirus Software, Windows System Defender, Windows PC Aid, Windows Turnkey Console, Windows Security Renewal, Windows Software Keeper, Windows Proactive Safety, Windows Safety Toolkit, Windows Ultimate Safeguard, Windows Antihazard Solution, Windows ProSecure Scanner, Windows Virtual Security, Smart Anti-Malware Protection, Windows High-End Protection, Windows Pro Web Helper, Windows Antivirus Release, My Security Engine, Windows No-Risk Agent, Windows Premium Console, Windows Virus Hunter, Windows Safety Series, My Security Shield, Windows Custom Management, Windows Guard Tools, Windows Problems Stopper, Windows AntiHazard Center, Windows Secure Workshop, Windows Protection Unit, Windows Interactive Security, Windows Virtual Angel, Personal Internet Security 2011, Windows Health Keeper, Windows Protection Maintenance, Windows Malware Sleuth, Windows AntiHazard Helper, Windows Custodian Utility, Windows Secure Web Patch, Windows Control Series, Windows Threats Destroyer, Windows Multi Control System, Windows Pro Safety, Windows Privacy Extension, Windows Secure Workstation, Smart Internet Protection 2011, Internet Security Essentials, Windows Smart Partner, Windows Secure Surfer, Windows Pro Rescuer, Security Master AV, Windows Shielding Utility, Windows Daily Adviser, Activate Ultimate Protection, Windows Advanced Toolkit, Windows First-Class Protector, Windows Performance Catalyst, Windows Premium Defender, Windows Maintenance Suite, Windows Security Suite, CleanUp Antivirus, Strong Malware Defender, Windows ProSecurity Scanner, PC Live Guard, Windows Safety Checkpoint, Windows Home Patron, Security Antivirus, Best Malware Protection, Windows Maintenance Guard, Windows Expert Series, Windows Web Commander, Windows Interactive Safety, Windows Functionality Checker, Windows Guard Solutions, Live PC Care, Windows Firewall Constructor, Windows Web Combat, Additional Guard, Windows Advanced User Patch, Windows Pro Solutions, Windows Telemetry Center, My Security Wall, Internet Security Suite, Windows Crucial Scanner, Windows Active Defender, Windows Managing System, Windows Antivirus Care, VirusSecurity, Windows Protection Master, Windows Shield Tool, Windows Efficiency Accelerator, Windows Enterprise Suite, Windows Performance Adviser, Windows Abnormality Checker, Windows Private Shield, Windows Advanced Security Center, Windows Proprietary Advisor, Live Enterprise Suite, Windows Be-on-Guard Edition, Volcano Security Suite, Windows Safety Wizard, Virus Doctor, Windows Instant Scanner, Windows Tools Patch, Windows Custom Safety, Windows Enterprise Defender, Smart Engine, Windows Care Taker, Windows Smart Warden, Smart Internet Protection 2012, Enterprise Suite, Windows Pro Safety Release, Windows PRO Scanner, Windows Risk Minimizer, Windows Software Saver, Windows Safety Manager, Windows Virtual Firewall, Windows Anti-Malware Patch, Extra Antivirus, Windows Activity Debugger, Windows Privacy Module, Windows Profound Security, Windows Antivirus Patch and Anti-Malware Lab. Identifying traits of Windows Defence Counsel and related rogue anti-malware programs consist of an ‘Activate Ultimate Protection’ button, features such as the ‘Advanced Process Control’ and an overall interface that imitates the outdated Windows Security Center software.

True to the habits of all rogue security products, Windows Defence Counsel can’t provide actual protection or diagnostic data about PC threats, but Windows Defence Counsel will still provide fake information as a substitute for the real thing.
Download SpyHunter Spyware Scanner
SpywareRemove.com malware experts have found that fraudulent popup alerts from Windows Defence Counsel can warn about attacks against your Registry or identity-related information, as well as falsely advertising the presence of various types of malicious software – including keyloggers, trojans, rootkits and spyware.

SpywareRemove.com malware experts don’t recommend purchasing Windows Defence Counsel’s registration key, which is the end-game for its criminal partners in their attempt to con victims with fake security software. However, you may find some use in registering Windows Defence Counsel for free with the key ’0W000-000B0-00T00-E0020′ since this can expedite Windows Defence Counsel’s deletion.

Ill Tidings About Windows Defence Counsel’s Poor Software Preferences


Windows Defence Counsel and similar FakeVimes-based PC threats are also noted to cause browser redirect attacks and may do this to expose you to hostile sites, or to redirect your searches to profitable spam-based search engines. However, these attacks aren’t the worst possibility from Windows Defence Counsel, which SpywareRemove.com malware researchers warn may even block your real security programs:
  • Windows Defence Counsel will attempt to monitor your memory processes and shut down certain processes that it disapproves of, such as Windows Live OneCare and other Windows-based tools.
  • Windows Defence Counsel can also be guilty of more extreme measures than the above and may even delete important Registry entries for other types of security programs such as AV scanners.

Regardless of the above issues, SpywareRemove.com malware researchers always recommend that you use dedicated anti-malware programs to remove Windows Defence Counsel, since many FakeVimes-based PC threats like Windows Defence Counsel are also installed along with trojans and may include additional components that aren’t obviously visible.

Windows Defence Counsel Automatic Detection Tool (Recommended)


Is your PC infected with Windows Defence Counsel? To safely & quickly detect Windows Defence Counsel, we highly recommend you run the malware scanner listed below.



Visual & GUI Characteristics


Windows Defence Counsel Screenshot 2Windows Defence Counsel Screenshot 3Windows Defence Counsel Screenshot 4Windows Defence Counsel Screenshot 5Windows Defence Counsel Screenshot 6Windows Defence Counsel Screenshot 7Windows Defence Counsel Screenshot 8Windows Defence Counsel Screenshot 9Windows Defence Counsel Screenshot 10Windows Defence Counsel Screenshot 11Windows Defence Counsel Screenshot 12

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name Detection Count
    1 Windows Defence Counsel.lnk 447
    2 %APPDATA%\ Protector-myww.exe 21
    3 %APPDATA%\ Protector-ogon.exe 12
    4 %AppData%\NPSWF32.dll N/A
    5 %AppData%\Protector-[RANDOM 3 CHARACTERS].exe N/A
    6 %AppData%\Protector-[RANDOM 4 CHARACTERS].exe N/A
    7 %AppData%\result.db N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-5-27_7"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "whecqycyiq"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0HKEY..\..\..\..{Subkeys}_HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312HKEY_CURRENT_USER\Software\ASProtectHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ackwin32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDSurvey.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fsm32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infwin.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pavsched.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sbserv.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssg_4104.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\webdav.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapro.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Additional Information

  • The following messages's were detected:
    # Message
    1Error
    Attempt to modify registry key entries detected. Registry entry analysis is recommended.
    2Warning
    Firewall has blocked a program from accessing the Internet
    C:\program files\internet explorer\iexplore.exe
    is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Posted: May 27, 2012 | By
Share:
Follow Me on Pinterest More More
Threat Level: 10/10
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Rate this article:
Detection Count: 23

Leave a Reply

What is 4 + 14 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)