Windows Premium Console – money oriented fake anti-virus

Windows Premium Console program is a fraudware that can compromise the security of your PC. It contrives to bypass the firewall and anti-viruses available on a computer and reach its targeted point. The process of infiltration is carried out invisibly for PC owner. Usually it is a big surprise when the icon appears on a desktop. Windows Premium Console has the same evil properties as other representatives from FakeVimes virus group. It launches scan automatically, generates the fake messages and so on. It poses itself as a modern and useful AV program that is a must on every computer. Additionally, Windows Premium Console can strike its roots to the core of the system, it is not easy to detect and remove it.

WindowsPremiumConsole
WindowsPremiumConsole

The first signs that Windows Premium Console virus has invaded your system :

  • Windows Premium Console causes redirections to the sites where would not like to go.
  • Your computer starts working slowly. This concerns starting up, shutting down, playing games, and surfing the web.
  • Searches are redirected or your homepage and desktop are settings are changed.
  • Your decent anti-virus tools are prevented from running
  • The permanent interference in your steady process of work. The pop ups flash at certain intervals of time, stating that some potential threats are detected

Windows Premium Console automatic remover:

Windows Premium Console at our Youtube channel:

Windows Premium Console manual remover:

Windows Premium Console files:
Protector-[rnd].exe in %AppData% folder
Delete Windows Premium Console registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

Leave a Comment

*