A Windows 98 & ME forum. Win98banter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » Win98banter forum » Windows ME » Software & Applications
Site Map Home Authors List Search Today's Posts Mark Forums Read Web Partners

wtoolsa error



 
 
Thread Tools Display Modes
  #1  
Old May 23rd 04, 01:42 AM
Jean
external usenet poster
 
Posts: n/a
Default wtoolsa error

wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
  #2  
Old May 23rd 04, 02:14 AM
Mike M
external usenet poster
 
Posts: n/a
Default wtoolsa error

wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar
family
(http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp) or even a variant of
the CoolWebSearch parasite. It certainly doesn't form a part of the Win Me
operating system. One install mechanism it uses is if you choose to install
the toolbar from xxx.websearch.com

Boot to Safe Mode, open MSConfig (Start, Run, enter MSConfig in the box and
click OK), open the Startup tab and uncheck the entry being used to launch
wstoolsa.exe, possibly labelled something like WinTools as well as any entries
referring to wtoolsb.dll, wsup.exe and tb_setup.exe.

Browse to and delete the contents of your C:\Windows\Temp folder and also
clear you Temporary Internet Files (Internet Options | General | Delete Files
and ensure that you check the box "Delete all offline content", then click OK
and Apply.

Now check Add/Remove Programs and uninstall any entry for WinTools.

You should also delete the entire Wintools folder which is probably
located as a sub-folder in C:\Program Files\Common Files or alternatively in
C:\Windows\System. Check for and delete all copies of wtoolsa.exe,
wtoolsb.dll, wsup.exe and tb_setup.exe.

Now reboot back into Normal Mode and check your system for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot
(http://www.safer-networking.org/) and scan your system for and remove all
unwanted parasites, adware and spyware that might be hiding on your PC.

I would suggest you download and run merijn's CWShredder which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html). Create a folder called
hijackthis on C: and copy the file you downloaded to that folder. Close as
many applications as you can including all instances of Internet Explorer and
then run hijackthis.exe and post back the log, provided that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.

Possible entries in the HiJackThis log to remove include:
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Fun Web Products Installer
Start) - http://imgfarm.com/images/nocache/funwe....0.0.5.cab
--?
Mike Maltby MS-MVP



Jean wrote:

wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.



  #3  
Old May 24th 04, 02:09 AM
external usenet poster
 
Posts: n/a
Default wtoolsa error


-----Original Message-----
wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
.
I have the same problem. HELP!

  #5  
Old May 26th 04, 12:45 AM
external usenet poster
 
Posts: n/a
Default wtoolsa error


-----Original Message-----
wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
.Hi. I can't help, but I'm getting the same message. It

seemed to start after I downloaded a critical updte to
media player. Have you done the same?

  #6  
Old May 26th 04, 01:03 AM
Mike M
external usenet poster
 
Posts: n/a
Default wtoolsa error

.Hi. I can't help, but I'm getting the same message. It
seemed to start after I downloaded a critical updte to
media player. Have you done the same?


You picked up this parasite when browsing or as a free gift with your latest
"free" software instalaltion. It has nothing to do with either Microsoft or
any critical update for media player.

wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar
family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp). It certainly
doesn't form a part of the Win Me operating system. One install mechanism it
uses is if you choose to install the toolbar from xxx.websearch.com.

Boot to Safe Mode, open MSConfig (Start, Run, enter MSConfig in the box and
click OK), open the Startup tab and uncheck the entry being used to launch
wstoolsa.exe, possibly labelled something like WinTools as well as any entries
referring to wtoolsb.dll, wsup.exe and tb_setup.exe.

Browse to and delete the contents of your C:\Windows\Temp folder and also
clear you Temporary Internet Files (Internet Options | General | Delete Files
and ensure that you check the box "Delete all offline content", then click OK
and Apply.

Now check Add/Remove Programs and uninstall any entry for WinTools.

You should also delete the entire Wintools folder which is probably
located as a sub-folder in C:\Program Files\Common Files or alternatively in
C:\Windows\System. Check for and delete all copies of wtoolsa.exe,
wtoolsb.dll, wsup.exe and tb_setup.exe.

Now reboot back into Normal Mode and check your system for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot
(http://www.safer-networking.org/) and scan your system for and remove all
unwanted parasites, adware and spyware that might be hiding on your PC.

I would suggest you download and run merijn's CWShredder which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html). Create a folder called
hijackthis on C: and copy the file you downloaded to that folder. Close as
many applications as you can including all instances of Internet Explorer and
then run hijackthis.exe and post back the log, provided that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.

Entries in the HiJackThis log to remove include:

R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe

Finally to prevent reinfection download and use SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can inocualte your
PC against infection by many parasites and using Tools | Custom Blocking add
the following:
Item Name - WinTools
CLSID - {87766247-311C-43B4-8499-3D5FEC94A183}
--?
Mike Maltby MS-MVP




wrote:

-----Original Message-----
wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
.Hi. I can't help, but I'm getting the same message. It

seemed to start after I downloaded a critical updte to
media player. Have you done the same?



  #7  
Old May 26th 04, 07:40 PM
Charles
external usenet poster
 
Posts: n/a
Default wtoolsa error


-----Original Message-----
wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
.

I have the same problem. Have you recieved any answers
yet? If you have please forward the web page or email to
me. Thank you in advance.
Charles
  #8  
Old May 26th 04, 07:58 PM
Heather
external usenet poster
 
Posts: n/a
Default wtoolsa error

Read the 100's of answers for this problem on this and other WinME news
groups.......click the + sign beside a question and read the answer......and
follow it.

HF
"Charles" wrote in message
...

-----Original Message-----
wtoolsa has caused an error in KERNEL32.DLL wtoolsa will
now close if you continue to experience problems try
restarting.
that dosen't work it keeps poping up evertime I close it.
.

I have the same problem. Have you recieved any answers
yet? If you have please forward the web page or email to
me. Thank you in advance.
Charles



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Wtoolsa Error bob1nor General 2 May 24th 04 05:49 AM
WtoolsA Error EDITH General 2 May 24th 04 05:42 AM
Error Message - Wtoolsa - Kernel32.dll Martin Allan General 5 May 20th 04 05:22 PM
Wtoolsa has caused an error Jeannie General 5 May 19th 04 11:13 PM


All times are GMT +1. The time now is 05:33 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 Win98banter.
The comments are property of their posters.