1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Windows Work Catalyst

Do not be fooled by the seemingly innocuous looking Windows Work Catalyst. This rogue antispyware application will try its utmost to come across as a genuine security tool, but in reality it is nothing more than a malicious rogue security tool out to rip you off. Windows Work Catalyst does not own any of its professed capabilities, and cannot detect or remove any type of threat from the system.

Windows Work Catalyst enters the system with the help of dangerous browser hijackers. These browser hijacking web domains forcefully redirect users to their compromised landing pages, where they make use of established drive-by download tactics to root the Windows Work Catalyst infection into unsuspecting PCs. Other popular forms of infiltration used by Windows Work Catalyst include bogus online malware scanners acting as advertisements for the rogue, and bundled security updates obtained from third party websites.

Symptoms associated with Windows Work Catalyst include users being unable to connect to the Internet, as well as the inability to launch any type of executable on the system. Other victims of Windows Work Catalyst reported increased erratic system behavior, as well as poor system performance.

Take back what is rightfully yours and destroy Windows Work Catalyst before it destroys your PC. This is best achieved by making use of the power of a genuine security tool.

Download Spyware Removal Tool to Remove* Windows Work Catalyst
  • Quick & tested solution for Windows Work Catalyst removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Work Catalyst

Files associated with Windows Work Catalyst infection:

%AppData%\Microsoft\[random].exe

Windows Work Catalyst processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Work Catalyst registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
hKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.