Severity scale  
  (64/100)

Windows Work Catalyst. How to Remove? (Uninstall Guide)

removal by - -   Also known as WindowsWorkCatalyst | Type: Rogue Antispyware
12

Windows Work Catalyst is a fake security program that is promoted via fake scanners and Trojans. It imitates system check and states that your computer in infected with viruses and malware. In order to remove the supposedly found infection and remove viruses you have to pay for a full version of Windows Work Catalyst. Of course, you shouldn't do that because this program is a scam. Fake scan results is a method to scare you into purchasing the program. You should remove Windows Work Catalyst from your computer manually or use an automatic removal tool below.

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Windows Work Catalyst will constantly display fake security alerts stating that your computer in infected with malicious software. It will rate major components of your system by given scores. They are usually very low. Once installed, Windows Work Catalyst will prompt you to start your computer in protected mode to ensure that your computer is properly protected against possible attacks and malware. As you can see, Windows Work Catalyst is nothing more but a scam. It displays fake security alerts and error messages to make you think that your computer in infected. Then it prompts to pay for a full version of the program to clean up the computer. Do not buy. Instead, use our removal instructions below to remove Windows Work Catalyst from the system as soon as possible.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Work Catalyst. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows Work Catalyst. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes Windows Work Catalyst (2011-05-13 16:13:02)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows Work Catalyst (2011-05-13 16:13:02)
Plumbytes
We are testing Plumbytes's efficiency (2011-05-13 16:13)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes Windows Work Catalyst (2011-05-13 16:13:02)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows Work Catalyst (2011-05-13 16:13:02)
Webroot SecureAnywhere AntiVirus

Windows Work Catalyst manual removal

Kill processes:
[random].exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'
Delete files:
%UserProfile%\Application Data\Microsoft\[random].exe

Information updated:

Comments on Windows Work Catalyst

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)