Debugger redirect getting deleted



  • Hi,

    I noticed that the Debugger entry in Image File Execution Options got deleted several times in the past days on my home computer (Sophos Home, Win10 1909) and on computers at work (Sophos Anti-Virus, Win10 1809).

    This does not only happen to the Debugger entry of notepad.exe, but also to the entry of calc.exe (redirect to OldCalc by Winaero).

    I don’t know if this is related to Sophos AV, something in the OS or whatever. Does this happen to anybody else? Does anyone know a workaround for that?

    Kind regards, ldlx



  • You are asking about notepad.exe and calc.exe, which are Microsoft products. This is a forum for the Notepad++ editor (notepad++.exe: there are plus signs in the name), which is a completely separate product not made by Microsoft at all.

    So, unfortunately, you have asked in the wrong place. I might suggest a Sophos forum (if you really think it’s caused by that), or a Microsoft forum otherwise.



  • @PeterJones said in Debugger redirect getting deleted:

    This is a forum for the Notepad++ editor (notepad++.exe: there are plus signs in the name),

    Clearly the OP knows this, from 8 prior posts… Interesting.



  • @PeterJones redirecting from notepad.exe to Notepad++ is a feature of Notepad++.

    “Debugger” Commandline is: “C:\Program Files\Notepad++\notepad++.exe” -notepadStyleCmdline -z



  • @ldlx said in Debugger redirect getting deleted:

    redirecting from notepad.exe to Notepad++ is a feature of Notepad++

    Hmm, don’t think that is relevant to your original post…



  • @ldlx said in Debugger redirect getting deleted:

    @PeterJones redirecting from notepad.exe to Notepad++ is a feature of Notepad++.

    “Debugger” Commandline is: “C:\Program Files\Notepad++\notepad++.exe” -notepadStyleCmdline -z

    I guess Notepad++ fancy registry entry for replacing notepad.exe does have the word Debugger, though I’ve never heard it referred to that before, so it didn’t click with me that you were referring to that mode of Notepad++.

    Once again, however, since you say the problem also occurs with the “Debugger” entry for calc.exe, then the problem is independent of Notepad++. Again, I think either a Sophos forum (if you think AV is the culprit) or a Microsoft forum (if you think it’s something to do with the OS) would be more likely to provide insight into your problem. There might be someone here who has run across it… but also maybe not.

    Given the possible issues described at this malwarebytes blog, it really wouldn’t surprise me if your AntiVirus or AntiMalware were trying to protect you by not allowing “Debugger” entries. You might look into whether there is an option (maybe recently added) in Sophos to allow/disallow those IFEO Debugger entries.

    Anyway, good luck. (And remember, if you cannot get around the anti-Debugger limitation on your system, you can always just associate appropriate filetypes with notepad++.exe instead of with notepad.exe, without using IFEO “Debugger” settings; if you prefer the notepad-style-command-line, then use the same options specified in the IFEO in your normal association.)



  • @PeterJones I just want get you folks warned as this is an official feature of Notepad++ since a short time (7.8.0.0). Yes, I’m aware that Notepad++ developers can’t work around this.



  • @ldlx I just updated to 1909 recently and discovered this same issue. I’m not using Sophos, so I’m pretty sure it’s a straight up Microsoft issue. I can’t even manually edit the registry key after giving myself every permission under the sun. It seems MS is hell bent on us not using this functionality anymore. :(



  • @Rob-Saunders said in Debugger redirect getting deleted:

    @ldlx I just updated to 1909 recently and discovered this same issue. I’m not using Sophos, so I’m pretty sure it’s a straight up Microsoft issue. I can’t even manually edit the registry key after giving myself every permission under the sun. It seems MS is hell bent on us not using this functionality anymore. :(

    Ok, nevermind. I just uninstalled my antivirus (I was using Bitdefender) and suddenly everything works fine.


Log in to reply