Monday, March 28, 2011

Microsoft Debug System Removal Guide

Microsoft Debug System Removal Guide
Microsoft Debug System is a fake antivirus program that pretends to be a very good antivirus which can detect and remove viruses/malwares from computer. Microsoft Debug System cheats the user that it can protect the computer from malwares. Once Microsoft Debug System is installed in the computer, it will start automatically when Windows boot. Then it WILL SURELY display fake alert that there are malwares in the computer and also other system errors. Microsoft Debug System will urge the user to register Microsoft Debug System by purchasing the full version of Microsoft Debug System to remove the malwares and repair the system errors. In fact, Microsoft Debug System cannot detect and remove any malwares. Microsoft Debug System cannot repair any system errors.

Microsoft Debug System can be removed by using Emsisoft HiJackFree to stop the processes and kill the files from the hard drive. Then, the user has to restore the registry entries added and modified by Microsoft Debug System. Finally, all the file related to Microsoft Debug System must be deleted from the hard drive. All of them has been shown in the removal guide below.

Microsoft Debug System should be removed immediately!

Microsoft Debug System Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'

Remove Folders and Files
%Temp%\random\[random].exe

No comments:

Post a Comment