Windows Tweaking Utility monitors browsing habits and purchasing activities. The data collected is sent to the creator of the application or third-parties. It displays surveys in a pop-up window. Windows Tweaking Utility uses Internet connection in the background without a user’s knowledge and in some cases may even affect Internet connection speed because your Internet connections will go through its own proxy. Windows Tweaking Utility is bundled in many freeware and commercial applications and it is introduced to a user when those commercial or free products are installed. It could be Windows screensavers, themes, games, etc.

Manual Removal of Windows Tweaking Utility: First to avoid any further infections caused by internet browsing redirects users will need to go to their Internet Options; this can be done by going to the start menu followed by control panel. Once in Internet Options choose the “Connections” tab followed by “LAN Settings” uncheck the “Use a Proxy Server” Option. Once done click “Ok” to save these settings. Next users restart your computer in safe mode. To access safe mode, restart your computer and tap the F8 button. When correctly done a black screen will appear with options for starting up Windows. Choose Safe Mode and Windows will load safe mode, Next locate and delete the following files associated with Windows Tweaking Utility:

• %UserProfile%\Application Data\Microsoft\<random>.exe

Windows Tweaking Utility Registry Entries that should be removed:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ‘0’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ‘0’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ‘1’

Please Contact Us Here for more information on Windows Tweaking Utility Malware/ Virus
Need help removing Windows Tweaking Utility Malware/ Scareware or other PC problems? E-Mail Us Here

Be Sociable, Share!

•