Some Malware programs try to conceal their presence by installing themselves as Debugger entries for other, legitimate programs. Trojan Remover checks for such programs during the Normal scan (and also during a FastScan).

 

When Trojan Remover finds such a file it will display an alert screen, EVEN IF the file is not positively detected as Malware. This is because if an invalid Imagefile Debugger entry is created it could mean that the legitimate program referenced may not work properly.

 

Caution: a file NEED NOT BE MALICIOUS just because it is installed as an Imagefile Debugger. For example, the SysInternals Process Explorer installs itself in this way (as a Debugger for Taskmgr.exe) if you choose its option to "Replace Task Manager". You are recommended not to take action on any file alerted on in this way unless it is positively identified as Malware. If you are unsure, you can submit the file to Simply Super Software for analysis. Information on how to do this is on the Contact Us page of the website.

 

When the alert screen is displayed, the options available depend on whether the Imagefile Debugger file can be found. If the file cannot be found, the option to rename the file is not available. The general options are:

 

Leave this reference in place

No action will be taken on the file, and the scan will continue. This is the default action to take unless the file is positively identified as Malware.

 

Remove this reference from the Windows Registry

Trojan Remover will remove this Imagefile Debugger entry. This will disable the file concerned from loading when the referenced legitimate program is executed.

 

Remove this reference from the Windows Registry and disable the file by renaming it

[This option is only available if the file concerned actually exists]

This is the recommended option if the file is positively identified as Malware. The reference loading the file is removed. Then the file is renamed (during a reboot if necessary) to ensure that it can no longer run.

 

Exclude this file from future scans

Select this option if you no longer want Trojan Remover to show an alert screen when this file is scanned. No action will be taken on the file.

 

Select the required option and click on the OK button.

 

Clicking on the Stop Scan button will stop the remainder of the scan. No action will be taken on the file currently being alerted on.