[OUTDATED / UNSUPPORTED] RemoveWAT

Discussion in 'Windows 7' started by Hazar, Oct 15, 2009.

Thread Status:
Not open for further replies.
  1. monet

    monet MDL Novice

    Feb 26, 2010
    1
    0
    0
    A possiblity!

    I found this on another website!
    Perhaps it can be useful for those already with the update KB971033 installed!

    "OK i know there is a lot of scare over the WAT KB971033. Here are some things you can do. If you used one of the WAT REMOVERS.
    First Option Uninstall kb971033
    If you want to Keep it that is Fine Also or you want to keep auto Updates on and dont want to be bothered about the wat thing.
    here is what you can do
    Download it install it. Very easy to find KB971033 on MS website will give you the download for the update.
    here is the tricky part.
    Go to Control Panel\All Control Panel Items\Administrative Tools\Local Security policy
    From there
    Software Restriction Policies- right click and create new
    Go to additional rules
    Create 2 hash Rules Or path rules I like hash only cause if the file move Still denied.
    C:\Windows\System32\Wat\WatAdminSvc
    C:\Windows\System32\Wat\WatUX
    Restart
    Your are done.
    It has been installed but the operating system is now blocking it from ever running.
    The exe Cant run there for it can’t tell on you, it is installed so there is no update to watch out for. Fight MS WIN 7 with MS WIN 7"
     
  2. dureal99d

    dureal99d MDL Novice

    Feb 26, 2010
    10
    0
    0
    #1762 dureal99d, Feb 26, 2010
    Last edited: Feb 26, 2010
    thank you i will try it & also should i set it back to auto when finished or should i leave it set to manual - or were you implying that i simply change the setting to manual without restoring wat & re-removing wat.
     
  3. ailef

    ailef MDL Senior Member

    Nov 30, 2007
    300
    16
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    995
    134
    30
    Just set to manual.
     
  5. RF9

    RF9 MDL Novice

    Feb 16, 2010
    14
    0
    0
  6. Klan

    Klan MDL Novice

    Feb 26, 2010
    2
    0
    0
    It does.
    I just had to get my grey mass to work (and send the kids to play outside!).
    I went through the manual restore again with greater care.
    While there I saw a 'Wat' folder in system32 with 'WatAdmiSvc.exe' inside it, I deleted it as well.
    Also I noticed that some of the files that had to be changed had a '.removed' on the end
    instead of '.bak'. So I am guessing that RemoveWat 2.2 couldn't do the job totally automatically.
    Restarted and ran 'MGADiag' , choosing not to make changes to the computer
    and I almost fainted when i saw 'Genuine' in a pretty green colour!
    My screen was still black, but that was just amatter of pesonalising back to my theme.
    :worthy:
    I thank you from the bottom of my heart.
     
  7. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    2.2.5 out, fully protects from WAT and also disables trial time bomb in evaluation ISOs fully
     
  8. dureal99d

    dureal99d MDL Novice

    Feb 26, 2010
    10
    0
    0
    Nice, so uh can we recieve a link to the 225 download please. oh & i deleted the wat folder in my system 32 folder is this a bad thing to do i have not erased it out of the recycle biin as of yet cause i want to make sure it does not damage the system in doing so. but i have power cycled successfully.
     
  9. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    first post was updated...
     
  10. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,445
    421
    60
    i love the anti wat part :p
     
  11. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    #1771 Hazar, Feb 26, 2010
    Last edited: Feb 26, 2010
    (OP)
    lol you decompiled it already lmao
     
  12. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,445
    421
    60
    #1772 PAYMYRENT, Feb 26, 2010
    Last edited by a moderator: Feb 26, 2010
    whats the point of having IDA if i cant use it?
     
  13. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    fair enough lol
     
  14. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,445
    421
    60
    lol that wat part comes second.

    the wlms part is better
     
  15. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    lol thats cool
     
  16. dureal99d

    dureal99d MDL Novice

    Feb 26, 2010
    10
    0
    0
    Hello Hazar

    perhaps i am misunderstanding you when you say the post has been updated are you saying that you posted a link to the new version of remove you created Ver 2.2.5 or are you saying that that version does not exist and you meant 2.2.4. just wondering. thank you!!
     
  17. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,445
    421
    60
    the first post was updated meaning he added the link to the newer version
     
  18. MDL2500

    MDL2500 MDL Novice

    Oct 22, 2009
    8
    0
    0
    Recent Disturbing Experience with Windows Update and WATU

    On 24 Feb 10, the program dllhost.exe began activating and then closing on my Win7 system over a half-hour period. This has NEVER happened before. At first I though there was a worm/virus happening, so I began scanning the system with various tools. Nothing was found. When I finally turned off my computer, it showed that there were updates that would be installed. Since I ALWAYS have Windows Update set to ONLY NOTIFY ME of updates, I immediately became worried that something else wasn't right.

    I immediately restarted the computer and went to Windows Update. There I found that the setting had been change to "automatically download and install updates" and that two updates listed as important had been installed at the previous shutdown. The infamous KB971033 was listed an an option ready for install, which I then set to "hide" and also reset the update operation to ONLY NOTIFY.

    Evidently, micro$oft remotely accessed my computer and reset the Windows Update configuration via dllhost.exe.

    I now use the firewall to block internet traffic when I'm not at the computer.
     
  19. dureal99d

    dureal99d MDL Novice

    Feb 26, 2010
    10
    0
    0
    Ah, well then something must be off because the file i receaved was the file version 2.2.4. just so you are made aware there may be a link mix up
     
  20. NoJuan999

    NoJuan999 Experienced SLIC Tool Operator

    Jul 31, 2009
    9,916
    1,942
    300
    Link in first post is for v2.2.5 now.
    I just checked it.