Tuesday, June 26, 2012

How to get rid of Windows Premium Console?

Windows Premium Consoleis a rogue antivirus program that belongs to FakeVimes family of parasites. This family of rogues is famous for their release a new fake antivirus almost every single day by changing names and servers they are distributed. These badware imitate actions of antiviruses however they do not have real databases and they are trying to scam you. So how exactly does Windows Premium Console work on computer?

Windows Premium Console is configured to run every time you start your computer. Once started, it will perform a scan and display false scan results that state that there are many programs on your computer that are infected. If you attempt to use the program to remove any of these so-called infections, though, it will state that you first need to purchase it before being allowed to do so. As all of these scan results are false, or the files do not even exist on your computer, please ignore them. While running, Windows Proactive Safety will also show fake security alerts from the Windows taskbar that attempts to scare you into thinking that your computer is under attack or is severely infected. Examples of some alerts you may see include:
Error
Trojan activity detected. System data security is at risk.
It is recommended to activate protection and run a full system scan.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Error
Attempt to modify registry key entries detected. Registry entry analysis is recommended.

Just like the scan results, all of these security alerts are bring no useful information about system security state and should be ignored.

It goes without saying that you should not endure this malicious yoke residing on your computer. You should remove it ASAP. The easy and effective removal is available for you by means of GridinSoft Trojan Killer. Upload it right now and automatically remove this hoax from your private territory. You can also remove it manually. The guide is stipulated below. If any questions occur, you may contact support team any time via customer system ticket http://trojan-killer.net/support/

Windows Premium Console malware remover:

malware removal tool

Delete Windows Premium Console files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[rnd].exe
%AppData%\result.db
Delete Windows Premium Console registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

No comments:

Post a Comment