Fake Windows Work Catalyst Removal – How to Remove Windows Work Catalyst Virus

Windows Work Catalyst Description

Windows Work Catalyst is a rogue antispyware application which belongs to one of the latest released fake antivirus from the same family as Windows Attention Utility, Windows Supervision Utility. Windows Work Catalyst displays lots of misleading popup alert messages and fake system scan results to scare users and push them to buying its useless software. It promotes mostly through the use of Trojans, fake online anti-malware scanners, malicious websites, and ads, entering your system secretly without your awareness. When this Virus is on board, it will tell you that your computer is infected with various threats, asking you to purchase its full version in order to remove all the infections. No matter how Windows Work Catalyst boasts of itself, it will never protect you from cyber threats, for it is a big threat itself and may cause irrevocable damage to your system. Therefore, in order to secure the stability and normal operation of an infected PC, you should show no mercy to this vicious rogue when it is found in your computer. Windows Work Catalyst prevents from scanning by antivirus application and needs to be removed manually. 

Screenshot of Windows Work Catalyst

Windows Work Catalyst is Very Dangerous   

Windows Work Catalyst is a malicious fake antispyware program
Windows Work Catalyst may spread via Trojans
Windows Work Catalyst may display numerous fake security messages
Windows Work Catalyst may install additional spyware to your computer
Windows Work Catalyst violates your privacy and compromises your security
Windows Work Catalyst causes your computer slowing down and even crashing constantly.

Windows Work Catalyst Removal Guide Step By Step

1) Locate and delete Windows Work Catalyst associated files：

%Documents and Settings%\All Users\Application Data\[random]\
%Documents and Settings%\All Users\Application Data\[random]\[random].exe
%Documents and Settings%\All Users\Application Data\[random]\[random].mof
%Documents and Settings%\All Users\Application Data\[random]\[random].dll
%Documents and Settings%\All Users\Application Data\[random]\[random].ocx
%Documents and Settings%\All Users\Application Data\[random]\[random]\
%UserProfile%\Application Data\Windows Work Catalyst\
%UserProfile%\Application Data\Windows Work Catalyst\cookies.sqlite
%UserProfile%\Application Data\Windows Work Catalyst\Instructions.ini

2) Detect and delete Windows Work Catalyst related registry entries：

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ’1′

Tee Support is the #1 place to get IMMEDIATE live help for your PCs, peripherals, devices and software applications 24/7. If you cannot solve the issue with the instructions above or need any other assistance, please ask Tee Support Online Technical Support for help.