84,488,480 programs installed

Should I remove Windows Core Toolbar?

What percent of users and experts removed it?
68% remove it32% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0002%

Versions

VersionDistribution
1.0.0 100.00%

Windows Core Toolbar

What is Windows Core Toolbar?

Windows Core Toolbar installs a toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to a remote server in order to suggest services or provide ads via the toolbar. It also may automatically download and install updates without notifying the user.

Overview

During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). The program adds a toolbar to Microsoft Internet Explorer. The primary executable is named browserhelp.exe. Many users end up uninstalling this after less than a month of it being installed. The setup package generally installs about 9 files and is usually about 3.01 MB (3,158,272 bytes).
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • The wisdom of the experts agree, if you don't use it you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Windows Core Toolbar.
browserhelp.exe (0984165f63e2c7c3fec92c20327894d2) has been flagged by the following 9 scanners:
Anti-Virus softwareVersionDetection
Bitdefender 1.0.20.820 Gen:Trojan.StartPage.iKW@aiCnmbai
Emsisoft Anti-Malware 8.13.06.13.12 Gen.Trojan.StartPage!IK
F-Secure 11.2013-13-06_5 Gen:Trojan.StartPage.iKW@aiCnmbai
G Data 13.6.22.301/22.560 Gen:Trojan.StartPage.iKW@aiCnmbai
IKARUS anti.virus t3scan.1.1.109.0 Gen.Trojan.StartPage
Kaspersky 14.0.0.3192 HEUR:Trojan.Win32.StartPage
McAfee 5600.7104 Artemis!0984165F63E2
McAfee-GW-Edition 7.7104 Artemis!0984165F63E2
Norman 10.20130613 W32/Malware
browserhelper.dll (77235f8358cb31f44c052e7a899532d1) has been flagged by the following 8 scanners:
Anti-Virus softwareSoftware versionDetection
Comodo Security 16877 UnclassifiedMalware
ESET-NOD32 8760 Win32/Adware.Bonzuna.A
Fortinet FortiGate 5.1.147.0 Riskware/Bonzuna
McAfee 5.600.0.1067 Artemis!77235F8358CB
McAfee-GW-Edition 2013 Artemis!77235F8358CB
Sophos 4.91.0 Mal/BHO-J
Symantec 20131.1.5.61 WS.Reputation.1
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R06H1D4
       View all 17 all detections

Program detailsProgram details

Installation folder: C:\Program Files\Core Systems\Windows Core Toolbar\
Uninstaller: MsiExec.exe /X{858AB62B-4851-4E89-B8CD-D54F1EB40778}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 3.01 MB
Language: English (United States)

Program filesFiles installed by Windows Core Toolbar

Program executable:browserhelp.exe (Malware detected)
Path:C:\Program Files\Core Systems\Windows Core Toolbar\browserhelp.exe
MD5:0984165f63e2c7c3fec92c20327894d2
Additional files:
  • browserhelper.dll - WCT BHO (Windows Core Toolbar BHO)
  • bonzuna.dll (by Visicom Media Inc) - DTX Toolbar (DTX kernel Module)
  • bonzunaX.dll - dtx Dynamic Link Library
  • iewrk.dll
  • sqlite3.dll
  • wcoretb.dll (by Search Core Systems) - Windows Core Toolbar
  • wcthelper.exe (by Search Core Systems) - Windows Core Toolbar Helper
  • wcupdt.exe (by Search Core System) - Search Core Updater

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • browserhelper.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name '&Windows Core Toolbar BHO' with the class of {ACC01A56-70E3-472E-9C4F-83B1DA817DD8}.
Internet Explorer Toolbar
  • wcoretb.dll is loaded as Internet Explorer Toolbar with the name '&Windows Core Toolbar' with the class of {3A6BE320-DC9B-4D24-A6E8-621B81544F4B}.
2 Scheduled Tasks (Boot/Login)
  • wcupdt.exe is automatically launched at startup through a scheduled task named Windows Core Toolbar Updater.
  • wcthelper.exe is automatically launched at startup through a scheduled task named Windows Core Helper.

How do I remove Windows Core Toolbar?

You can uninstall Windows Core Toolbar from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Windows Core Toolbar, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Windows Core Toolbar.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Windows Core Toolbar you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win Vista (SP2) 33%
Win XP 33%
 
HOW DOES IT RUN?
Plugs into Internet Explorer
 
USER ACTIONS
Uninstall it 68%
Keep it 32%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows Vista 33.33%
Windows 7 33.33%
Windows XP 33.33%
Which OS releases does it run on?
Windows Vista Home Premiu... 33.33%
Windows 7 Home Premium 33.33%
Microsoft Windows XP 33.33%

Distribution by countryGeography

66.67% of installs come from the United States
Which countries install it?
  United States 66.67%
  Australia 16.67%
  Canada 16.67%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Dell 33.33%
Acer 33.33%
American Megatrends 33.33%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.