MPC Core Protect Service Uninstall

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you uninstall MPC Core Protect Service. These MPC Core Protect Service uninstall instructions work for every version of Windows.

We’ve been asked by several of our users to create an article featuring an uninstall guide for a program called MPC Core Protect Service. The process can be seen in your Task Manager as an executable protectservice.exe and is what has been cause for alarm for many people. We will discuss the program in question in more detail further in the article, but we would like to first inform you that you’re not facing a virus or malware, so there’s no need to worry on that account. Below this article you will find instructions that will walk you through the process of uninstalling MPC Protect Service from your computer. In the following few paragraphs we will also aim to educate you on how such programs usually get distributed and what you can do to prevent them from infiltrating your system.

What is MPC Core Protect Service?

Unless you’re already familiar with this software product, this will naturally be your first question. This program goes hand in hand with MPC Cleaner and is generally considered to be a PUP or potentially unwanted program due to its rather shady behavior and the questionable tasks it may perform on your computer. To a certain extent, its effects may be compared to those of a browser hijacker and it’s likely that you may have already experienced them for yourself. For example, it’s highly probable that the invasive program has changed your default search engine and browser homepage, which are actually among the first recognizable symptoms of MPC Protect Service being present on your machine. In addition to this, any attempts of yours to restore your browser settings to their previous state will be in vain, as the program will simply change them back, the second you open your browser or even just a new tab in it again.

As a part of the same software group as MPC Cleaner, it’s possible that this particular piece of programming may have come together with the native program (MPC Cleaner), in case you have that one installed on your machine. If this is not the case, it’s likely that you installed it alongside some other program that it was bundled together with. Software bundles are actually the number one source of PUP’s and the developers behind them usually count on users’ lack of knowledge on the topic to install the whole bundle as opposed to only the main program. To be clear about what we’re trying to say here, allow us to illustrate:

Picture yourself needing to download a specific piece of freeware or shareware and going to an open source download platform or other form of file sharing website for this purpose. You find the program of interest, so you download it and then proceed to install in on your machine. Once you’ve entered the setup you are typically given two options: either the default installation settings, which require little to no interaction on your part or the custom/advanced ones that are slightly more detailed. The developers count on people choosing the former option, as this will ensure that all contents of the bundle are installed (together with e.g. MPC Core Protect Service). If, however, you opt for the custom settings, those contents will not only be disclosed to you, but you will be able to choose which of the added applications will indeed be installed and which will be left behind. This is a very simple, but crucial point in the installation of any new software and being aware of it, as well as implementing it will save you from a lot of trouble in the future, as program bundles can also potentially serve as distribution methods for viruses and malware.


Obviously, keeping your system clean and PUP-free is way better than getting ‘infected’ and then searching for ways to remove the unwanted software. Aside from customizing the installation settings of new programs, it’s also important to choose the places where you download those programs from with care. Torrent sites, open source download platforms and just generally obscure-looking websites are by far not the ideal download sources, as they are often targeted by hackers and cybercriminals. Use only trusted sources and trusted software, as the safety of your computer and the data stored on it depends on it. Another vital component of a healthy machine is a reliable antivirus program and preferably also an anti-malware tool. The combination of the two, coupled with regularly running scans with them will ensure that your PC stays in good condition and no uninvited guests are allowed.


Name MPC ProtectService
Type PUP
Danger Level  Low (Not necessarily a security threat, but still not recommended to keep on your PC)
Symptoms  A changed browser homepage and default search engine may be early indications of an infection.
Distribution Method  Usually comes with the installation of a native program, but can also come inside program bundles of various other software
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

MPC Core Protect Service Uninstall



Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:


Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.



Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.


We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

  • This step is very important, because you can catch other threats (like Ransomware and Spyware) while looking for the Adware process.

Right click on each of the virus processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.


Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


If all the prior steps fail to help you or you have reason to believe your system is exposed to threats like Ransomware, we advise you to download a professional scanner and remover.

Remember to leave us a comment if you run into any trouble!

1 Comment

Leave a Comment