Windows Attention Utility (WindowsAttentionUtility) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Windows Attention Utility is a fake security application which was released recently. The purpose of a security application is to provide computer security through computer tools such as antivirus protection, spyware protection, firewall (internet protection), and privacy protection. People purchase security software so that they and their computer can be protected. Windows Attention Utility will scan the computer in just seconds; however, a real program generally takes 10s of minutes to hours. Windows Attention Utility was released approximately May 12, 2023. Previous versions include Windows Inspection Utility and Windows Supervision Center. Windows Stability Center is also a previous version with a slightly different look and similar functionality. The main difference between the clones is the name; however, the look is also slightly different between the two programs. Windows Attention Utility claims to offer a variety of tools including computer safety, network security, private data protection, hard drive optimization, media components, and memory & devices. Windows Attention Utility will also provide system information on the computer and will provide this information in the bottom part of the program.

Windows Attention Utility is generally installed without user permission through the use of a trojan horse. The trojan horse is generally downloaded while browsing the internet through a variety of infection methods. Windows Attention Utility is similar in functionality to ThinkPoint and CleanThis. Windows Attention Utility main executable is generally a series of random letters.

Below is our recommended removal tool for Windows Attention Utility. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with Windows Attention Utility with task manager. If task manager has been blocked by Windows Attention Utility, try using Process Explorer.

Windows Attention Utility, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by Windows Attention Utility can be found below.

“Warning!

Location: C:\Program Files\java\jre6\bin\jqs.exe
Viruses: Virus.Win32.Sality

Deny – Forbid the execution of potentially harmful software.

Enable Protection – Click to activate antivirus and remove all infections.”

It is recommended to use safe mode when removing the virus because Windows Attention Utility will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. Windows Attention Utility can be removed by using the

or by manually removing the virus.

View Windows Attention Utility Files
View Windows Attention Utility Keys

The user comments for ThinkPoint and the user comments for CleanThis may provide insight into removing Windows Attention Utility since the viruses are similar.

Manual Windows Attention Utility Removal – In order to manually remove Windows Attention Utility, the processes associated with Windows Attention Utility must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Windows Attention Utility entered the computer.

Important: Before attempting to manually remove Windows Attention Utility, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing Windows Attention Utility. However, please use discretion since these specific comments pertain to other fake antivirus programs.

Stop Windows Attention Utility Processes (Learn How To Do This)
[random letters].exe

Remove Windows Attention Utility Files (Learn How To Do This)

Windows XP – C:\Documents and Settings\[username]\Local Settings\Application Data\Microsoft\[random letters].exe

Windows Vista & Windows 7 – C:\Users\[username]\AppData\Roaming\Microsoft\[random letters].exe

For example, the executable was named gbgvas.exe when we tested Windows Attention Utility. Gbgvas.exe is most likely a random six letter executable file.

Remove Windows Attention Utility Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\Windows Attention Utility
HKEY_LOCAL_MACHINE\SOFTWARE\Windows Attention Utility
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Attention Utility

Remove Windows Attention Utility Startup Entry (Learn How To Do This)
[random letters].exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove Windows Attention Utility.

This entry was posted on Thursday, May 12th, 2023 at 4:05 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

Leave a Reply