Windows Privacy Agent

February 28th, 2011
Home » Rogue Antispyware » Windows Privacy Agent
Repair and protect your computer easily. Download Windows Privacy Agent removal tool  

Windows Privacy Agent description

Windows Privacy Agent is a rogue program which comes along with the download and installs itself automatically. With the aid of trojan infections, spam emails and various websites it tends to be affiliated one can easily fall victim to this dubious application. The trojan based software starts its fake activities as soon as it is installed on your computer.

Once active Windows Privacy Agent will simulate a system scan and will produce false positives and convince the user that their machine has been severely compromised. Here are few fake warning messages:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ’show details’ to learn more.

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press ‘OK’ to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning!
Name: firefox.exe
Name: c:\program files\firefox\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

If infected it will modify system settings and make changes on Windows registry to ensure that it will be loaded when Windows is started. Do not fall for this blatant scam. Information it shows is fraudulent and can’t be trusted. Malware only gains you to purchase its “licensed” version but it can’t be trusted. Use decent malware remover and terminate Windows Privacy Agent as soon as possible.

Manual Windows Privacy Agent Removal


Windows Privacy Agent registry values:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'
Help: How to edit windows registry entries


Other malicious Windows Privacy Agent files:

%UserProfile%\Application Data\.exe

The manual removal of files and registries should be performed by experienced users. A system can be badly affected if any error is done during the manual removal. We recommend using automatic removal tools to delete Windows Privacy Agent, if you are not familiar with deleting malware manually.

Leave a Reply