Windows Performance Catalyst. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - - | Type: Viruses
12

Windows Performance Catalyst is a rogue antispyware program that imitates a security tool in order to rip computer users off. It is one more clone of infamous Think Point. The program spreads through Trojan viruses and infects computers completely secretly. When Windows Performance Catalyst is installed, it also is configured to start automatically when computer is booted.

Once computer is started, Windows Performance Catalyst runs its scanner and pretends to look for malicious threats. The program later generates a list of supposedly infected files. In reality these files don't exist at all or they are legitimate files of some of your programs. The reason why they are being displayed is because the program expects you believe you system is being infected. Then it offers purchasing a full version of Windows Performance Catalyst which promises providing the best security for your system.

What is more, Windows Performance Catalyst also displays tons of fake security alerts and reports that your system badly needs protection. You can have a look at them here:

Warning! Identity theft attempt detected
Hidden connection ip: XXXX
Target: Your bank account details.
Your IP: XXXX

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)

Torrent Alert
Recommended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer and protocol through the torrent link.

Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmploc.dll

These message will lead to asking you to purchase a full version of Windows Performance Catalyst. Do not fall for this trick as you will not receive any program at all. Paying for Windows Performance Catalyst is equal to throwing your money to the wind. Instead you should make sure to get rid of Windows Performance Catalyst as soon as possible.

If it happened to you to fall for this trick and you have paid for Windows Performance Catalyst, immediately contact your credit card company and dispute the charges. You must also remove Windows Performance Catalyst as soon as possible in order to finish this nightmare. Use Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or any other reliable antispyware program for the best results.

The latest parasite names used by FakeVimes:
[newest]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Performance Catalyst you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Performance Catalyst. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Performance Catalyst (2012-02-20)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Performance Catalyst (2012-02-20)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Performance Catalyst (2012-02-20)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Performance Catalyst (2012-02-20)
Windows Performance Catalyst snapshot
Windows Performance Catalyst

Windows Performance Catalyst manual removal:

Kill processes:
Inspector[random].exe

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Inspector"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsadaware.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsbelt.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdeputy.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsicload95.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionslnetinfo.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmpftray.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsnetscanpro.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsnssys32.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsozn695m5.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsperswf.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsPskSvc.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSafetyKeeper.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsspoler.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsvbcons.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionswinservn.exe "Debugger"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszonealarm.exe "Debugger"

Unregister DLLs:
NPSWF32.dll

Delete files:
%AppData%Inspector-[random].exe

%AppData%NPSWF32.dll

%AppData%result.db

%UserProfile%DesktopWindows Protection Master.lnk

%StartMenu%ProgramsWindows Protection Master.lnk

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author