Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Slow internet connection
  • System crashes
  • Slow Computer

Windows Easy Transfer

Officially Windows Easy Transfer is a program which comes with Windows 7. This application helps to transfer files and configurations from old system to the new one. It is possible transfer such things as user accounts, documents, music, pictures, videos and more. However, there is also another Windows Easy Transfer program, which is a fake application targeting computers running on Windows operating system. It is a rogue program, which comes from other servers than the real application.

Most of the time, the rogue Windows Easy Transfer program pretends to be a game installation file, some kind of application or even an antivirus program. It can also be delivered via spam messages, hiding in the attachments. Once you download and open that attachment you automatically initiate the download and install of Windows Easy Transfer.

Windows Easy Transfer exhibits the generic behavior of rogue antispyware, because once installed it starts sending excessive number of fake security alerts and warning notifications, "informing" the user about various security issues in his system. Since this rogue shares its name with a legitimate Windows program, it is not that hard for it to trick the inexperienced user to believe that there is something wrong with his computer. Once the user is convinced that he has been infected with viruses, Windows Easy Transfer offers to fix these problems if the user purchase the licensed version of the program. This infection meddles with your internet settings, because whenever you try to open your internet browser, it forcefully redirects you to the purchase page, asking to fill in the blanks with your credit card information.

Do not be fooled, but this. If you pay you will only lose your money and expose your bank account to further abuse by the cyber criminals. Not to mention, that Windows Easy Transfer will continuously damage your system regardless of the fact whether you have payed or not. In order to solve this problem, you need to remove Windows Easy Transfer from your computer. It might be hard to do it manually if you are not a computer software expert, so you are advised to get a reliable security application and terminate Windows Easy Transfer automatically. Don't fall victim for this cunning rogue!

Download Spyware Removal Tool to Remove* Windows Easy Transfer
  • Quick & tested solution for Windows Easy Transfer removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Easy Transfer

Files associated with Windows Easy Transfer infection:

%AppData%\Microsoft\[random].exe

Windows Easy Transfer processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Easy Transfer registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.