Monday, July 4, 2011

Removal of Windows Debugging Agent misleading reports

Windows Debugging Agent blends three categories of detections in one misleading informational attack on users.
It detects as viruses harmless files which make a part of its installation. They usually  make  a small portion of the total infections it detects.
The second category infections are actually detected by free online scanner, which  facilities are used by the tricky program in a hush mode. The number of infections detected by online scanner is usually even lesser than the number of harmless files installed as a part of Windows Debugging Agent and then detected as viruses.
The third category detections are pure falsifications as these are merely names unrelated to any object. As a rule, they make bigger portion of reported infections than the two above categories together.
Get rid of Windows Debugging Agent as a misleading program, for even the detections that actually happen  are reported in misleading way as their real detector is a free online antivirus. The online antivirus, though not misleading,  is rather a limited functionality  outdated tool as it is not able to Windows Debugging Agent as adware when scanning computer system.
Click here to run free scan in order to detect all the infections, including  latest releases, and remove Windows Debugging Agent as its extermination is important part of system disinfection.

Windows Debugging Agent snapshot:



Windows Debugging Agent removal instructions:
Delete infected files:
%UserProfile%\Application Data\Microsoft\.exe
Delete infected registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

No comments: