cannot stop popups

Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes, if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the thread:
http://castlecops.com/modules.php?na...topic&p=172295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at this forum:
http://forum.aumha.org/viewforum.php?f=30

In your post, please state your problem clearly and what you've done so far to fix
it.

See the "housekeeping" you should complete before you post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"lizg" wrote in message
...
Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes, if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the thread:
http://castlecops.com/modules.php?na...topic&p=172295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at this forum:
http://forum.aumha.org/viewforum.php?f=30

In your post, please state your problem clearly and what you've done so far to fix
it.

See the "housekeeping" you should complete before you post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"lizg" wrote in message
...
Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

On Mon, 29 Nov 2004 06:15:02 -0800, "lizg"
in microsoft.public.win98.performance wrote:

Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

You got some good advice from Glen.

One thing that i might add is that many people have written, and i have
found to be true is that no ONE product stops or catches everything.

I run Spywareguard in the continuously in the background.
Spywareblaster also "immunizes" the browser against accessing a list of
dangerous sites.

(Spywareguard also has a Macromedia Flash killer, but it is a complete
disabler and sometimes Flash is good.)

Daily, i run Adaware and Spybot Search & Destroy.

On the virus side, AVG 7.0 is running in the background (though I have some
questions about that one insofar as the embedded email client in the email
scanner)

Every few weeks I will also run Trendmicro Housecall for a "second opinion"
as to whether there are any viruses or not.

This may sound like overkill. I really don't think so because it prevents a
lot of frustration like I have, and you are, experiencing.

I also have a HOSTS file in operation
http://mvps.org/winhelp2002/hosts.htm that stops most popups.

The ones that get through are usually those that use a numeric IP and thence
don't have a domain resolution or those that "ride" on the domain name of
the site itself -- in that last case I find that they are most often
activated by Java Script, but if you go through the "make available offline"
(don't complete the dialog) it will cough up it's real name.


FACE

On Mon, 29 Nov 2004 06:15:02 -0800, "lizg"
in microsoft.public.win98.performance wrote:

Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

You got some good advice from Glen.

One thing that i might add is that many people have written, and i have
found to be true is that no ONE product stops or catches everything.

I run Spywareguard in the continuously in the background.
Spywareblaster also "immunizes" the browser against accessing a list of
dangerous sites.

(Spywareguard also has a Macromedia Flash killer, but it is a complete
disabler and sometimes Flash is good.)

Daily, i run Adaware and Spybot Search & Destroy.

On the virus side, AVG 7.0 is running in the background (though I have some
questions about that one insofar as the embedded email client in the email
scanner)

Every few weeks I will also run Trendmicro Housecall for a "second opinion"
as to whether there are any viruses or not.

This may sound like overkill. I really don't think so because it prevents a
lot of frustration like I have, and you are, experiencing.

I also have a HOSTS file in operation
http://mvps.org/winhelp2002/hosts.htm that stops most popups.

The ones that get through are usually those that use a numeric IP and thence
don't have a domain resolution or those that "ride" on the domain name of
the site itself -- in that last case I find that they are most often
activated by Java Script, but if you go through the "make available offline"
(don't complete the dialog) it will cough up it's real name.


FACE

Thank you. I did all you mentioned last night and it worked. I did have to
run adware again and found 818 items to be quarantined which seems to have
stopped the explorer from locking up. Thanks for your help!!

"glee" wrote:

Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes, if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the thread:
http://castlecops.com/modules.php?na...topic&p=172295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at this forum:
http://forum.aumha.org/viewforum.php?f=30

In your post, please state your problem clearly and what you've done so far to fix
it.

See the "housekeeping" you should complete before you post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"lizg" wrote in message
...
Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!

Thank you. I did all you mentioned last night and it worked. I did have to
run adware again and found 818 items to be quarantined which seems to have
stopped the explorer from locking up. Thanks for your help!!

"glee" wrote:

Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes, if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the thread:
http://castlecops.com/modules.php?na...topic&p=172295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at this forum:
http://forum.aumha.org/viewforum.php?f=30

In your post, please state your problem clearly and what you've done so far to fix
it.

See the "housekeeping" you should complete before you post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"lizg" wrote in message
...
Help - I am running windows 98se. everytime i log on, my computer gets a ton
of popups, runs really slow, and then locks up. I have adware installed and
have run numerous times but now I get a error message saying,"unregistering
the OCX%16427%\wintools\wtoolsB.dll - registry entries HKCU. can anyone tell
me what to do to get this to stop? Thank s!!!!