|
Wtoolsa Error
Maybe that makes a definite statement about NAV (actually all Symantec
products). "Ken" wrote in message ... Thanks for your reply Mike. I'll give these items a try. I should have mentioned that the problem SEEMS to be associated with Norton Antivirus 2004. I've been "fighting" NAV problems for almost 2 months. Ken -----Original Message----- There have been multiple posts where users are experiencing this problem in the last couple of days and wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp) or possibly a variant of HuntBar (http://www.doxdesk.com/parasite/HuntBar.html). It certainly doesn't form a part of the Win Me operating system. Boot to Safe Mode, open MSConfig (Start, Run, enter MSConfig in the box and click OK), open the Startup tab and uncheck the entry being used to launch wstoolsa.exe, possibly labelled something like WinTools. Empty your Temporary Internet Files - Control Panels | Internet Options | General | Delete Files and ensure that you check the box "Delete all offline content", then click OK and Apply. Now check Add/Remove Programs and uninstall any entry for WinTools. You should also delete the entire Wintools folder which is probably located as a sub-folder in C:\Program Files\Common Files or alternatively in C:\Windows\System. Now reboot back into Normal Mode and check your system for commercial parasites. This might be a good time to download yourself a copy of the free Ad-Aware 6.0 from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also SpyBot (http://www.safer-networking.org/) and scan your system for and remove all unwanted parasites, adware and spyware that might be hiding on your PC. I would suggest you download and run merijn's CWShredder which targets the CoolWebSearch parasite. CWShredder can be downloaded from (http://www.zerosrealm.com/downloads/CWShredder.zip or http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many forms of the CoolWebSearch hijacker can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html and also http://www.pestpatrol.com/pestinfo/c/cws.asp. If you continue to have problems download a copy of HijackThis from http://www.spywareinfo.com/~merijn/downloads.html). Create a folder called hijackthis on C: and copy the file you downloaded to that folder. Close as many applications as you can including all instances of Internet Explorer and then run hijackthis.exe and post back the log, provided that it isn't too long, to this thread, otherwise to the HijackThis Forum at http://www.spywareinfo.com/forums/ and hopefully this will enable someone to identify the cause of your problem. --? Mike Maltby MS-MVP Ken wrote: I have a Wtoolsa error -- "Wtoolsa has caused an error in KERNEL32.DLL Wtoolsa will now close" Error reappears after restarting computer -- several times Running Scandisk did not help. Ken . |
Wtoolsa Error
I have a Wtoolsa error -- "Wtoolsa has caused an error in
KERNEL32.DLL Wtoolsa will now close" Error reappears after restarting computer -- several times Running Scandisk did not help. Ken |
Wtoolsa Error
There have been multiple posts where users are experiencing this problem in
the last couple of days and wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp) or possibly a variant of HuntBar (http://www.doxdesk.com/parasite/HuntBar.html). It certainly doesn't form a part of the Win Me operating system. Boot to Safe Mode, open MSConfig (Start, Run, enter MSConfig in the box and click OK), open the Startup tab and uncheck the entry being used to launch wstoolsa.exe, possibly labelled something like WinTools. Empty your Temporary Internet Files - Control Panels | Internet Options | General | Delete Files and ensure that you check the box "Delete all offline content", then click OK and Apply. Now check Add/Remove Programs and uninstall any entry for WinTools. You should also delete the entire Wintools folder which is probably located as a sub-folder in C:\Program Files\Common Files or alternatively in C:\Windows\System. Now reboot back into Normal Mode and check your system for commercial parasites. This might be a good time to download yourself a copy of the free Ad-Aware 6.0 from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also SpyBot (http://www.safer-networking.org/) and scan your system for and remove all unwanted parasites, adware and spyware that might be hiding on your PC. I would suggest you download and run merijn's CWShredder which targets the CoolWebSearch parasite. CWShredder can be downloaded from (http://www.zerosrealm.com/downloads/CWShredder.zip or http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many forms of the CoolWebSearch hijacker can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html and also http://www.pestpatrol.com/pestinfo/c/cws.asp. If you continue to have problems download a copy of HijackThis from http://www.spywareinfo.com/~merijn/downloads.html). Create a folder called hijackthis on C: and copy the file you downloaded to that folder. Close as many applications as you can including all instances of Internet Explorer and then run hijackthis.exe and post back the log, provided that it isn't too long, to this thread, otherwise to the HijackThis Forum at http://www.spywareinfo.com/forums/ and hopefully this will enable someone to identify the cause of your problem. --? Mike Maltby MS-MVP Ken wrote: I have a Wtoolsa error -- "Wtoolsa has caused an error in KERNEL32.DLL Wtoolsa will now close" Error reappears after restarting computer -- several times Running Scandisk did not help. Ken |
Wtoolsa Error
Thanks for your reply Mike. I'll give these items a try.
I should have mentioned that the problem SEEMS to be=20 associated with Norton Antivirus 2004. I've=20 been "fighting" NAV problems for almost 2 months. Ken -----Original Message----- There have been multiple posts where users are=20 experiencing this problem in the last couple of days and wtoolsa.exe is malware and=20 appears to be a new member of the IBIS Toolbar family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp)=20 or possibly a variant of HuntBar=20 (http://www.doxdesk.com/parasite/HuntBar.html). It=20 certainly doesn't form a part of the Win Me operating system. Boot to Safe Mode, open MSConfig (Start, Run, enter=20 MSConfig in the box and click OK), open the Startup tab and uncheck the entry=20 being used to launch wstoolsa.exe, possibly labelled something like WinTools. Empty your Temporary Internet Files - Control Panels |=20 Internet Options | General | Delete Files and ensure that you check the=20 box "Delete all offline content", then click OK and Apply. Now check Add/Remove Programs and uninstall any entry for=20 WinTools. You should also delete the entire Wintools folder which=20 is probably located as a sub-folder in C:\Program Files\Common Files=20 or alternatively in C:\Windows\System. Now reboot back into Normal Mode and check your system=20 for commercial parasites. This might be a good time to download yourself a copy of the free Ad-Aware 6.0 from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also=20 SpyBot (http://www.safer-networking.org/) and scan your system=20 for and remove all unwanted parasites, adware and spyware that might be=20 hiding on your PC. I would suggest you download and run merijn's CWShredder=20 which targets the CoolWebSearch parasite. CWShredder can be downloaded from (http://www.zerosrealm.com/downloads/CWShredder.zip or http://www.spywareinfo.com/~merijn/files/cwshredder.zip).=20 Details of the many forms of the CoolWebSearch hijacker can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html and=20 also http://www.pestpatrol.com/pestinfo/c/cws.asp. If you continue to have problems download a copy of=20 HijackThis from http://www.spywareinfo.com/~merijn/downloads.html). =20 Create a folder called hijackthis on C: and copy the file you downloaded to that=20 folder. Close as many applications as you can including all instances of=20 Internet Explorer and then run hijackthis.exe and post back the log, provided=20 that it isn't too long, to this thread, otherwise to the HijackThis Forum at http://www.spywareinfo.com/forums/ and hopefully this=20 will enable someone to identify the cause of your problem. --=81 Mike Maltby MS-MVP Ken wrote: I have a Wtoolsa error -- "Wtoolsa has caused an error=20 in KERNEL32.DLL Wtoolsa will now close" Error reappears after restarting computer -- several=20 times Running Scandisk did not help. Ken . |
Wtoolsa Error
My opinion of NAV2004 and in fact most Symantec products is well known in
these newsgroups but feeling charitable as I do today I don't think that you can blame NAV2004 for your problems with wtoolsa.exe. -- Mike Maltby MS-MVP Ken wrote: Thanks for your reply Mike. I'll give these items a try. I should have mentioned that the problem SEEMS to be associated with Norton Antivirus 2004. I've been "fighting" NAV problems for almost 2 months. |
Wtoolsa Error
Hi Mike
I cannot get ride of one program "WinTools for IE" using=20 Add/Remove. On Remove -- it needs an Internet connection. With a=20 connection it gives me boxes to uncheck - which I do --=20 But the program is still there. Also -- I've deleted all WinTools Folders and Files -=20 except WinTools.0 -- Won't allow me to delete -- "Possibly=20 in use by Windows" Suggestions???? Ken -----Original Message----- There have been multiple posts where users are=20 experiencing this problem in the last couple of days and wtoolsa.exe is malware and=20 appears to be a new member of the IBIS Toolbar family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp)=20 or possibly a variant of HuntBar=20 (http://www.doxdesk.com/parasite/HuntBar.html). It=20 certainly doesn't form a part of the Win Me operating system. Boot to Safe Mode, open MSConfig (Start, Run, enter=20 MSConfig in the box and click OK), open the Startup tab and uncheck the entry=20 being used to launch wstoolsa.exe, possibly labelled something like WinTools. Empty your Temporary Internet Files - Control Panels |=20 Internet Options | General | Delete Files and ensure that you check the=20 box "Delete all offline content", then click OK and Apply. Now check Add/Remove Programs and uninstall any entry for=20 WinTools. You should also delete the entire Wintools folder which=20 is probably located as a sub-folder in C:\Program Files\Common Files=20 or alternatively in C:\Windows\System. Now reboot back into Normal Mode and check your system=20 for commercial parasites. This might be a good time to download yourself a copy of the free Ad-Aware 6.0 from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also=20 SpyBot (http://www.safer-networking.org/) and scan your system=20 for and remove all unwanted parasites, adware and spyware that might be=20 hiding on your PC. I would suggest you download and run merijn's CWShredder=20 which targets the CoolWebSearch parasite. CWShredder can be downloaded from (http://www.zerosrealm.com/downloads/CWShredder.zip or http://www.spywareinfo.com/~merijn/files/cwshredder.zip).=20 Details of the many forms of the CoolWebSearch hijacker can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html and=20 also http://www.pestpatrol.com/pestinfo/c/cws.asp. If you continue to have problems download a copy of=20 HijackThis from http://www.spywareinfo.com/~merijn/downloads.html). =20 Create a folder called hijackthis on C: and copy the file you downloaded to that=20 folder. Close as many applications as you can including all instances of=20 Internet Explorer and then run hijackthis.exe and post back the log, provided=20 that it isn't too long, to this thread, otherwise to the HijackThis Forum at http://www.spywareinfo.com/forums/ and hopefully this=20 will enable someone to identify the cause of your problem. --=81 Mike Maltby MS-MVP Ken wrote: I have a Wtoolsa error -- "Wtoolsa has caused an error=20 in KERNEL32.DLL Wtoolsa will now close" Error reappears after restarting computer -- several=20 times Running Scandisk did not help. Ken . |
Wtoolsa Error
Boot to Safe Mode and try and delete the folders from there. Have you used
MSConfig to remove all/any entries referring to wtoolsa.exe, wtoolsb.exe, wsup.exe and tb_setup.exe. Have you downloaded and run HiJackThis? If not do so. Close all windows, run HiJackThis and let it fix any entries similar to the following: O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common files\WinTools\WToolsA.exe O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common files\WinTools\WToolsA.exe O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Fun Web Products Installer Start) - http://imgfarm.com/images/nocache/funwe....0.0.5.cab Then browse to and delete the contents of your C:\Windows\Temp folder and also clear you Temporary Internet Files (Internet Options | General | Delete Files and ensure that you check the box "Delete all offline content", then click OK and Apply. Run Adaware again. Boot to Normal Mode and run HijackThis again to check that none of the wtoolsa stuff is still running. -- Mike Maltby MS-MVP Ken wrote: Hi Mike I cannot get ride of one program "WinTools for IE" using Add/Remove. On Remove -- it needs an Internet connection. With a connection it gives me boxes to uncheck - which I do -- But the program is still there. Also -- I've deleted all WinTools Folders and Files - except WinTools.0 -- Won't allow me to delete -- "Possibly in use by Windows" Suggestions???? |
Wtoolsa Error
"Ken" wrote:
Thanks for your reply Mike. I'll give these items a try. I should have mentioned that the problem SEEMS to be associated with Norton Antivirus 2004. I've been "fighting" NAV problems for almost 2 months. NAV2004 *is* a virus, and doubly so when installed on a system running Windows Me. Ron Martell Duncan B.C. Canada -- Microsoft MVP On-Line Help Computer Service http://onlinehelp.bc.ca "The reason computer chips are so small is computers don't eat much." |
Wtoolsa Error
Ouch!! vbg
Mart "Ron Martell" wrote in message ... "Ken" wrote: Thanks for your reply Mike. I'll give these items a try. I should have mentioned that the problem SEEMS to be associated with Norton Antivirus 2004. I've been "fighting" NAV problems for almost 2 months. NAV2004 *is* a virus, and doubly so when installed on a system running Windows Me. Ron Martell Duncan B.C. Canada -- Microsoft MVP On-Line Help Computer Service http://onlinehelp.bc.ca "The reason computer chips are so small is computers don't eat much." |
Wtoolsa Error
Why not say what you *really* think about NAV, Ron? :)
( and I agree wholeheartedly, BTW!) -- Noel Paton (MS-MVP 2002-2004, Win9x) Nil Carborundum Illegitemi http://www.btinternet.com/~winnoel/millsrpch.htm Please read http://dts-l.org/goodpost.htm on how to post messages to NG's or http://www.microsoft.com/presspass/f.../Mar27pmvp.asp "Ron Martell" wrote in message ... NAV2004 *is* a virus, and doubly so when installed on a system running Windows Me. Ron Martell Duncan B.C. Canada -- Microsoft MVP On-Line Help Computer Service http://onlinehelp.bc.ca "The reason computer chips are so small is computers don't eat much." |
All times are GMT +1. The time now is 01:11 PM. |
|
Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Win98Banter.com