Threat Database Rogue Anti-Spyware Program Windows Debugging Center

Windows Debugging Center

By Domesticus in Rogue Anti-Spyware Program

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 15
First Seen: July 4, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Debugging Center Image

Windows Debugging Center is a rogue security program. Rogue anti-spyware programs, a kind of malicious software, pretend to be real security tools. In reality, rogue security programs like Windows Debugging Center and Windows Debugging Center's clones (e.g. Windows Steady Work, Windows Antidanger Tool, and Windows Debugging Agent) deliberately damage computer system. Then, these programs will claim that the damage can be fixed as long as the computer user pays for a "full version" of Windows Debugging Center.
 

Can Windows Debugging Center Fix or Debug my Computer?

Absolutely not. Windows Debugging Center has no debugging or anti-malware capabilities whatsoever. In fact, Windows Debugging Center and Windows Debugging Center's clones are really little more than a convincing interface and a collection of Trojans and harmful scripts designed to wreak havoc on the infected computer.
 

How Can You Recognize Windows Debugging Center for What It Is?

Don't be fooled by Windows Debugging Center's use of Microsoft logos in Windows Debugging Center's interface or by Windows Debugging Center's many alarming security alerts. Windows Debugging Center does several things that a genuine anti-malware tool will never do:

  • A real anti-spyware application will never download and install itself without your permission.
  • A real anti-spyware application will never block you from leaving its window or prevent you from gaining access to your own files. It doesn't matter if the file is a supposed infection.
  • A real anti-spyware application will never perform unauthorized changes to your system settings, Windows Registry, or Internet Browser.

How Did Windows Debugging Center Enter Your Computer?

There are many ways in which Windows Debugging Center can invade a computer system. The most common is through a Trojan known as the Fake Microsoft Security Essentials Alert Trojan. As its name says, this Trojan displays a fake alert from Microsoft Security Essentials notifying you that there is a problem on your computer. It will recommend that you download Windows Debugging Center (or any other of Windows Debugging Center's clones) to remove the problem. There are many ways the Fake Microsoft Security Essentials Alert Trojan can get into your computer. Typically, this Trojan can be disguised as a video codec, a popular file on file sharing networks, or a system or file update from a third-party site. In these cases, you may have downloaded Windows Debugging Center without knowing what it was. Other times, this Trojan can infect your computer through a fake online malware scan or by a website that hijacks your Internet browser and forces it to download this Trojan.
 

How Can I Remove Windows Debugging Center from My Computer?

The best way to remove Windows Debugging Center is by using a genuine anti-malware utility. Often, Windows Debugging Center will not allow you to open popular security programs. In these cases, starting up Windows in Safe Mode will help you regain control.

SpyHunter Detects & Remove Windows Debugging Center

File System Details

Windows Debugging Center may create the following file(s):
# File Name MD5 Detections
1. nktflo.exe 49cd728d41dfabfbd26ec652743b6e6e 1
2. %AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Details

Windows Debugging Center may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

Trending

Most Viewed

Loading...