contracting wtoolsa

[heirloom]

I have seen the posts re: wtoolsa, but, I have not seen anything on how this
is contracted. Does anyone know how this is being distributed??

Heirloom, old and don't want it

[MowGreen [MVP]]

Methinks it's included in a " tool bar " installation :

http://www.spywareguide.com/spydet_426_wtoolsa_exe.html

xxx.websearch.com shows a downloadable tool bar on the page. I'm
going to download and install it on a Win98 VPC installation to test.


MowGreen [MVP]
*-343-* Never Forgotten


heirloom wrote:

> I have seen the posts re: wtoolsa, but, I have not seen anything on how this
> is contracted. Does anyone know how this is being distributed??
>
> Heirloom, old and don't want it
>
>

[MowGreen [MVP]]

Heck, installed it on an XP Pro system and there was not ActiveX
warning ... the darn thing just installed.
These files are present :
WToolsA.exe
WToolsB.dll
WSup.exe
Attempted to uninstall it from Add/Remove and it left the above
files in Program Files\Common Files\WinTools and WINDOWS\Prefetch
Nice uninstaller, eh ?

Now to boot to Safe Mode and remove this crap ...

MowGreen [MVP]


MowGreen [MVP] wrote:
> Methinks it's included in a " tool bar " installation :
>
> http://www.spywareguide.com/spydet_426_wtoolsa_exe.html
>
> xxx.websearch.com shows a downloadable tool bar on the page. I'm going
> to download and install it on a Win98 VPC installation to test.
>
>
> MowGreen [MVP]
> *-343-* Never Forgotten
>
>
> heirloom wrote:
>
>> I have seen the posts re: wtoolsa, but, I have not seen anything on
>> how this
>> is contracted. Does anyone know how this is being distributed??
>>
>> Heirloom, old and don't want it
>>
>>
>

[Mike M]

Are you saying that it was installed without your requesting it or that you
did click install but then got no further warning?
--
Mike Maltby MS-MVP



MowGreen [MVP] > wrote:

> Heck, installed it on an XP Pro system and there was not ActiveX
> warning ... the darn thing just installed.
> These files are present :
> WToolsA.exe
> WToolsB.dll
> WSup.exe
> Attempted to uninstall it from Add/Remove and it left the above
> files in Program Files\Common Files\WinTools and WINDOWS\Prefetch
> Nice uninstaller, eh ?
>
> Now to boot to Safe Mode and remove this crap ...

[MowGreen [MVP]]

Clicked the download link and it installed without any warning on XP
Pro with SP2 2120 on the system. Very disconcerting that SP2 would
not even throw up a warning message.

Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
remove it. Followed the steps here :
http://computercops.info/modules.php?name=Forums&file=viewtopic&p=172295
but , did not reboot until Spybot was run. It found another module
which it removed. Dumb me ... didn't catch which one and I already
deleted the backup :(

On their website it claims to be removeable using Add/Remove. It is
NOT. These SOB's should be tarred and feathered ... or drawn and
quartered, whichever is mowst painful ...

MowGreen [MVP]

Mike M wrote:

> Are you saying that it was installed without your requesting it or that you
> did click install but then got no further warning?

[heirloom]

You are mowst brave to have attempted that!! Answered all my questions
about where it comes from. I remember doing some research for information
on a thyroid condition that my wife has and picked up Comet Cursor with no
warning at one of the Thyroid sites....THAT p*ssed me off. And that was
back in the days when I couldn't even spell "Me."
Heirloom, old hate that stuff


"MowGreen [MVP]" > wrote in message
...
> Clicked the download link and it installed without any warning on XP
> Pro with SP2 2120 on the system. Very disconcerting that SP2 would
> not even throw up a warning message.
>
> Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
> remove it. Followed the steps here :
> http://computercops.info/modules.php?name=Forums&file=viewtopic&p=172295
> but , did not reboot until Spybot was run. It found another module
> which it removed. Dumb me ... didn't catch which one and I already
> deleted the backup :(
>
> On their website it claims to be removeable using Add/Remove. It is
> NOT. These SOB's should be tarred and feathered ... or drawn and
> quartered, whichever is mowst painful ...
>
> MowGreen [MVP]
>
> Mike M wrote:
>
> > Are you saying that it was installed without your requesting it or that
you
> > did click install but then got no further warning?
>

[heirloom]

Egads!!! I left my 'and' off!!!
Heirloom, old and someone lend me a "and"

"MowGreen [MVP]" > wrote in message
...
> Clicked the download link and it installed without any warning on XP
> Pro with SP2 2120 on the system. Very disconcerting that SP2 would
> not even throw up a warning message.
>
> Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
> remove it. Followed the steps here :
> http://computercops.info/modules.php?name=Forums&file=viewtopic&p=172295
> but , did not reboot until Spybot was run. It found another module
> which it removed. Dumb me ... didn't catch which one and I already
> deleted the backup :(
>
> On their website it claims to be removeable using Add/Remove. It is
> NOT. These SOB's should be tarred and feathered ... or drawn and
> quartered, whichever is mowst painful ...
>
> MowGreen [MVP]
>
> Mike M wrote:
>
> > Are you saying that it was installed without your requesting it or that
you
> > did click install but then got no further warning?
>