Windows Debug Center

Windows Debug Center Image

ESG malware analysts have received numerous reports since the beginning of 2012 of numerous clones of the FakeVimes family of malware causing problems on computers all over the world. While FakeVimes rogue security programs have been around since 2009, the batch of malware released in 2012 has been observed to include a dangerous rootkit bundled as part of the attack.

Windows Debug Center is one of these fake security programs, along with such bogus anti-virus programs as Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

Windows Debug Center and its clones are not particularly unique, registering as a textbook example of how a rogue security application attempts to scam a victim. Windows Debug Center will try to convince the victim to purchase a fake registration code for a "full version" of Windows Debug Center. However, Windows Debug Center is actually a malware infection that should be treated with a real, reliable anti-malware program. ESG security analysts have uncovered a serial number that you can use, 0W000-000B0-00T00-E0020 in order to relieve in the short-term symptoms of a Windows Debug Center infection. However, take into account that this registration code will not uninstall or remove Windows Debug Center from your computer system. It will only halt the symptoms long enough to give you a chance to execute a full scan using a reliable anti-malware program.

The Windows Debug Center Scam and How It Affects Your Computer

The Windows Debug Center scam is quite simple. Basically, criminals attempt to convince their victims that their computer system is under attack and that Windows Debug Center can solve a nonexistent malware infection. However, any attempt to get Windows Debug Center to work will be met with error messages claiming that the victim needs to purchase a "full working version" of Windows Debug Center. According to ESG malware analysts, the supposed full version Windows Debug Center is just as useless as the unregistered version. Looking into this program's code, it is easy to see that Windows Debug Center has no real anti-virus capabilities. Rather, Windows Debug Center is part of a scam that was created to embezzle your money. In order to do this, Windows Debug Center resorts to more invasive tactics. Windows Debug Center has been known to cause browser redirects, a constant stream of alarming error messages and frequent crashes on the infected computer system.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

SpyHunter Detects & Remove Windows Debug Center

Windows Debug Center Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Windows Debug Center may create the following file(s):
# File Name MD5 Detections
1. %AppData%\Protector-[RANDOM CHARACTERS].exe
2. %StartMenu%\Programs\Windows Debug Center.lnk
3. %Desktop%\Windows Debug Center.lnk
4. %AppData%\result.db
5. Protector-ddlv.exe 0ab700b2df47045373305f83eba0f407 0

Registry Details

Windows Debug Center may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rav7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashLogV.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vir-help.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntvdm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jedi.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msa.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\beagle.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wupdt.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Messages

The following messages associated with Windows Debug Center were found:

"Error Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan"
"Warning! Identity theft attempt Detected Hidden connection IP: 58.82.12.124 Target: Your passwords for sites"
"Warning! Virus Detected Threat detected: FTP Server Infected file: C:WindowsSystem32dllcachewmploc.dll"

Trending

Most Viewed

Loading...