Another beast that doesn't like to be removed. This wasn't detected by SpyBot, but it was definately there. These two processes wouldn't go away: WToolsA.exe and WSup.exe Using a free utility called PSKILL from Sysinternals, I wrote a simple batch script to kill processes "wtoolsa" and "wsup" then delete all files from the "c:\progra~1\common\wintools" folder. Watch out, these were marked as read only and one was hidden.

Once, I actually removed it using Add/Remove, but killing it was more fun.