contracting wtoolsa

I have seen the posts wtoolsa, but, I have not seen anything on how this
is contracted. Does anyone know how this is being distributed??

Heirloom, old and don't want it

Methinks it's included in a " tool bar " installation :

http://www.spywareguide.com/spydet_426_wtoolsa_exe.html

xxx.websearch.com shows a downloadable tool bar on the page. I'm
going to download and install it on a Win98 VPC installation to test.


MowGreen [MVP]
*-343-* Never Forgotten


heirloom wrote:

I have seen the posts wtoolsa, but, I have not seen anything on how this
is contracted. Does anyone know how this is being distributed??

Heirloom, old and don't want it

Heck, installed it on an XP Pro system and there was not ActiveX
warning ... the darn thing just installed.
These files are present :
WToolsA.exe
WToolsB.dll
WSup.exe
Attempted to uninstall it from Add/Remove and it left the above
files in Program Files\Common Files\WinTools and WINDOWS\Prefetch
Nice uninstaller, eh ?

Now to boot to Safe Mode and remove this crap ...

MowGreen [MVP]


MowGreen [MVP] wrote:
Methinks it's included in a " tool bar " installation :

http://www.spywareguide.com/spydet_426_wtoolsa_exe.html

xxx.websearch.com shows a downloadable tool bar on the page. I'm going
to download and install it on a Win98 VPC installation to test.


MowGreen [MVP]
*-343-* Never Forgotten


heirloom wrote:

I have seen the posts wtoolsa, but, I have not seen anything on
how this
is contracted. Does anyone know how this is being distributed??

Heirloom, old and don't want it

Are you saying that it was installed without your requesting it or that you
did click install but then got no further warning?
--
Mike Maltby MS-MVP



MowGreen [MVP] wrote:

Heck, installed it on an XP Pro system and there was not ActiveX
warning ... the darn thing just installed.
These files are present :
WToolsA.exe
WToolsB.dll
WSup.exe
Attempted to uninstall it from Add/Remove and it left the above
files in Program Files\Common Files\WinTools and WINDOWS\Prefetch
Nice uninstaller, eh ?

Now to boot to Safe Mode and remove this crap ...

Clicked the download link and it installed without any warning on XP
Pro with SP2 2120 on the system. Very disconcerting that SP2 would
not even throw up a warning message.

Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
remove it. Followed the steps here :
http://computercops.info/modules.php...topic&p=172295
but , did not reboot until Spybot was run. It found another module
which it removed. Dumb me ... didn't catch which one and I already
deleted the backup

On their website it claims to be removeable using Add/Remove. It is
NOT. These SOB's should be tarred and feathered ... or drawn and
quartered, whichever is mowst painful ...

MowGreen [MVP]

Mike M wrote:

Are you saying that it was installed without your requesting it or that you
did click install but then got no further warning?

You are mowst brave to have attempted that!! Answered all my questions
about where it comes from. I remember doing some research for information
on a thyroid condition that my wife has and picked up Comet Cursor with no
warning at one of the Thyroid sites....THAT p*ssed me off. And that was
back in the days when I couldn't even spell "Me."
Heirloom, old hate that stuff


"MowGreen [MVP]" wrote in message
...
Clicked the download link and it installed without any warning on XP
Pro with SP2 2120 on the system. Very disconcerting that SP2 would
not even throw up a warning message.

Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
remove it. Followed the steps here :
http://computercops.info/modules.php...topic&p=172295
but , did not reboot until Spybot was run. It found another module
which it removed. Dumb me ... didn't catch which one and I already
deleted the backup

On their website it claims to be removeable using Add/Remove. It is
NOT. These SOB's should be tarred and feathered ... or drawn and
quartered, whichever is mowst painful ...

MowGreen [MVP]

Mike M wrote:

Are you saying that it was installed without your requesting it or that
you
did click install but then got no further warning?

Egads!!! I left my 'and' off!!!
Heirloom, old and someone lend me a "and"

"MowGreen [MVP]" wrote in message
...
Clicked the download link and it installed without any warning on XP
Pro with SP2 2120 on the system. Very disconcerting that SP2 would
not even throw up a warning message.

Booted to Safe Mode and ran HijackThis, then AdAware, then Spybot to
remove it. Followed the steps here :
http://computercops.info/modules.php...topic&p=172295
but , did not reboot until Spybot was run. It found another module
which it removed. Dumb me ... didn't catch which one and I already
deleted the backup

On their website it claims to be removeable using Add/Remove. It is
NOT. These SOB's should be tarred and feathered ... or drawn and
quartered, whichever is mowst painful ...

MowGreen [MVP]

Mike M wrote:

Are you saying that it was installed without your requesting it or that
you
did click install but then got no further warning?