A Windows 98 & ME forum. Win98banter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » Win98banter forum » Windows ME » Hardware
Site Map Home Authors List Search Today's Posts Mark Forums Read Web Partners

Wtoolsa Error



 
 
Thread Tools Display Modes
  #1  
Old April 22nd 04, 08:26 PM
Steve Baron - KB3MM
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Maybe that makes a definite statement about NAV (actually all Symantec
products).

"Ken" wrote in message
...
Thanks for your reply Mike. I'll give these items a try.

I should have mentioned that the problem SEEMS to be
associated with Norton Antivirus 2004. I've
been "fighting" NAV problems for almost 2 months.

Ken
-----Original Message-----
There have been multiple posts where users are

experiencing this problem in
the last couple of days and wtoolsa.exe is malware and

appears to be a new
member of the IBIS Toolbar family
(http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp)

or possibly a variant
of HuntBar

(http://www.doxdesk.com/parasite/HuntBar.html). It
certainly
doesn't form a part of the Win Me operating system.

Boot to Safe Mode, open MSConfig (Start, Run, enter

MSConfig in the box and
click OK), open the Startup tab and uncheck the entry

being used to launch
wstoolsa.exe, possibly labelled something like WinTools.

Empty your Temporary Internet Files - Control Panels |

Internet Options |
General | Delete Files and ensure that you check the

box "Delete all offline
content", then click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for

WinTools.

You should also delete the entire Wintools folder which

is probably
located as a sub-folder in C:\Program Files\Common Files

or alternatively in
C:\Windows\System.

Now reboot back into Normal Mode and check your system

for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also

SpyBot
(http://www.safer-networking.org/) and scan your system

for and remove all
unwanted parasites, adware and spyware that might be

hiding on your PC.

I would suggest you download and run merijn's CWShredder

which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip).

Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and

also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of

HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html).

Create a folder called
hijackthis on C: and copy the file you downloaded to that

folder. Close as
many applications as you can including all instances of

Internet Explorer and
then run hijackthis.exe and post back the log, provided

that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this

will enable someone to
identify the cause of your problem.
--?
Mike Maltby MS-MVP



Ken wrote:

I have a Wtoolsa error -- "Wtoolsa has caused an error

in
KERNEL32.DLL Wtoolsa will now close"

Error reappears after restarting computer -- several

times

Running Scandisk did not help.

Ken



.


  #2  
Old May 22nd 04, 04:31 PM
Ken
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

I have a Wtoolsa error -- "Wtoolsa has caused an error in
KERNEL32.DLL Wtoolsa will now close"

Error reappears after restarting computer -- several times

Running Scandisk did not help.

Ken
  #3  
Old May 22nd 04, 05:16 PM
Mike M
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

There have been multiple posts where users are experiencing this problem in
the last couple of days and wtoolsa.exe is malware and appears to be a new
member of the IBIS Toolbar family
(http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp) or possibly a variant
of HuntBar (http://www.doxdesk.com/parasite/HuntBar.html). It certainly
doesn't form a part of the Win Me operating system.

Boot to Safe Mode, open MSConfig (Start, Run, enter MSConfig in the box and
click OK), open the Startup tab and uncheck the entry being used to launch
wstoolsa.exe, possibly labelled something like WinTools.

Empty your Temporary Internet Files - Control Panels | Internet Options |
General | Delete Files and ensure that you check the box "Delete all offline
content", then click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for WinTools.

You should also delete the entire Wintools folder which is probably
located as a sub-folder in C:\Program Files\Common Files or alternatively in
C:\Windows\System.

Now reboot back into Normal Mode and check your system for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot
(http://www.safer-networking.org/) and scan your system for and remove all
unwanted parasites, adware and spyware that might be hiding on your PC.

I would suggest you download and run merijn's CWShredder which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html). Create a folder called
hijackthis on C: and copy the file you downloaded to that folder. Close as
many applications as you can including all instances of Internet Explorer and
then run hijackthis.exe and post back the log, provided that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.
--?
Mike Maltby MS-MVP



Ken wrote:

I have a Wtoolsa error -- "Wtoolsa has caused an error in
KERNEL32.DLL Wtoolsa will now close"

Error reappears after restarting computer -- several times

Running Scandisk did not help.

Ken



  #4  
Old May 22nd 04, 05:27 PM
Ken
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Thanks for your reply Mike. I'll give these items a try.

I should have mentioned that the problem SEEMS to be=20
associated with Norton Antivirus 2004. I've=20
been "fighting" NAV problems for almost 2 months.

Ken
-----Original Message-----
There have been multiple posts where users are=20

experiencing this problem in
the last couple of days and wtoolsa.exe is malware and=20

appears to be a new
member of the IBIS Toolbar family
(http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp)=20

or possibly a variant
of HuntBar=20

(http://www.doxdesk.com/parasite/HuntBar.html). It=20
certainly
doesn't form a part of the Win Me operating system.

Boot to Safe Mode, open MSConfig (Start, Run, enter=20

MSConfig in the box and
click OK), open the Startup tab and uncheck the entry=20

being used to launch
wstoolsa.exe, possibly labelled something like WinTools.

Empty your Temporary Internet Files - Control Panels |=20

Internet Options |
General | Delete Files and ensure that you check the=20

box "Delete all offline
content", then click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for=20

WinTools.

You should also delete the entire Wintools folder which=20

is probably
located as a sub-folder in C:\Program Files\Common Files=20

or alternatively in
C:\Windows\System.

Now reboot back into Normal Mode and check your system=20

for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also=20

SpyBot
(http://www.safer-networking.org/) and scan your system=20

for and remove all
unwanted parasites, adware and spyware that might be=20

hiding on your PC.

I would suggest you download and run merijn's CWShredder=20

which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip).=20

Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and=20

also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of=20

HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html). =20

Create a folder called
hijackthis on C: and copy the file you downloaded to that=20

folder. Close as
many applications as you can including all instances of=20

Internet Explorer and
then run hijackthis.exe and post back the log, provided=20

that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this=20

will enable someone to
identify the cause of your problem.
--=81
Mike Maltby MS-MVP



Ken wrote:

I have a Wtoolsa error -- "Wtoolsa has caused an error=20

in
KERNEL32.DLL Wtoolsa will now close"

Error reappears after restarting computer -- several=20

times

Running Scandisk did not help.

Ken



.

  #5  
Old May 22nd 04, 05:43 PM
Mike M
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

My opinion of NAV2004 and in fact most Symantec products is well known in
these newsgroups but feeling charitable as I do today I don't think that you
can blame NAV2004 for your problems with wtoolsa.exe.
--
Mike Maltby MS-MVP



Ken wrote:

Thanks for your reply Mike. I'll give these items a try.

I should have mentioned that the problem SEEMS to be
associated with Norton Antivirus 2004. I've
been "fighting" NAV problems for almost 2 months.



  #6  
Old May 22nd 04, 07:18 PM
Ken
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Hi Mike

I cannot get ride of one program "WinTools for IE" using=20
Add/Remove.

On Remove -- it needs an Internet connection. With a=20
connection it gives me boxes to uncheck - which I do --=20
But the program is still there.

Also -- I've deleted all WinTools Folders and Files -=20
except WinTools.0 -- Won't allow me to delete -- "Possibly=20
in use by Windows"

Suggestions????

Ken
-----Original Message-----
There have been multiple posts where users are=20

experiencing this problem in
the last couple of days and wtoolsa.exe is malware and=20

appears to be a new
member of the IBIS Toolbar family
(http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp)=20

or possibly a variant
of HuntBar=20

(http://www.doxdesk.com/parasite/HuntBar.html). It=20
certainly
doesn't form a part of the Win Me operating system.

Boot to Safe Mode, open MSConfig (Start, Run, enter=20

MSConfig in the box and
click OK), open the Startup tab and uncheck the entry=20

being used to launch
wstoolsa.exe, possibly labelled something like WinTools.

Empty your Temporary Internet Files - Control Panels |=20

Internet Options |
General | Delete Files and ensure that you check the=20

box "Delete all offline
content", then click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for=20

WinTools.

You should also delete the entire Wintools folder which=20

is probably
located as a sub-folder in C:\Program Files\Common Files=20

or alternatively in
C:\Windows\System.

Now reboot back into Normal Mode and check your system=20

for commercial
parasites.

This might be a good time to download yourself a copy
of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also=20

SpyBot
(http://www.safer-networking.org/) and scan your system=20

for and remove all
unwanted parasites, adware and spyware that might be=20

hiding on your PC.

I would suggest you download and run merijn's CWShredder=20

which targets the
CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip).=20

Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and=20

also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

If you continue to have problems download a copy of=20

HijackThis from
http://www.spywareinfo.com/~merijn/downloads.html). =20

Create a folder called
hijackthis on C: and copy the file you downloaded to that=20

folder. Close as
many applications as you can including all instances of=20

Internet Explorer and
then run hijackthis.exe and post back the log, provided=20

that it isn't too
long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this=20

will enable someone to
identify the cause of your problem.
--=81
Mike Maltby MS-MVP



Ken wrote:

I have a Wtoolsa error -- "Wtoolsa has caused an error=20

in
KERNEL32.DLL Wtoolsa will now close"

Error reappears after restarting computer -- several=20

times

Running Scandisk did not help.

Ken



.

  #7  
Old May 22nd 04, 07:46 PM
Mike M
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Boot to Safe Mode and try and delete the folders from there. Have you used
MSConfig to remove all/any entries referring to wtoolsa.exe, wtoolsb.exe,
wsup.exe and tb_setup.exe.

Have you downloaded and run HiJackThis? If not do so. Close all windows, run
HiJackThis and let it fix any entries similar to the following:
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Fun Web Products Installer
Start) - http://imgfarm.com/images/nocache/funwe....0.0.5.cab

Then browse to and delete the contents of your C:\Windows\Temp folder and also
clear you Temporary Internet Files (Internet Options | General | Delete Files
and ensure that you check the box "Delete all offline content", then click OK
and Apply.

Run Adaware again.

Boot to Normal Mode and run HijackThis again to check that none of the wtoolsa
stuff is still running.
--
Mike Maltby MS-MVP



Ken wrote:

Hi Mike

I cannot get ride of one program "WinTools for IE" using
Add/Remove.

On Remove -- it needs an Internet connection. With a
connection it gives me boxes to uncheck - which I do --
But the program is still there.

Also -- I've deleted all WinTools Folders and Files -
except WinTools.0 -- Won't allow me to delete -- "Possibly
in use by Windows"

Suggestions????



  #8  
Old May 22nd 04, 10:41 PM
Ron Martell
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

"Ken" wrote:

Thanks for your reply Mike. I'll give these items a try.

I should have mentioned that the problem SEEMS to be
associated with Norton Antivirus 2004. I've
been "fighting" NAV problems for almost 2 months.


NAV2004 *is* a virus, and doubly so when installed on a system running
Windows Me.


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."
  #9  
Old May 23rd 04, 08:46 AM
Mart
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Ouch!! vbg

Mart


"Ron Martell" wrote in message
...
"Ken" wrote:

Thanks for your reply Mike. I'll give these items a try.

I should have mentioned that the problem SEEMS to be
associated with Norton Antivirus 2004. I've
been "fighting" NAV problems for almost 2 months.


NAV2004 *is* a virus, and doubly so when installed on a system running
Windows Me.


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."



  #10  
Old May 23rd 04, 09:02 AM
Noel Paton
external usenet poster
 
Posts: n/a
Default Wtoolsa Error

Why not say what you *really* think about NAV, Ron?
( and I agree wholeheartedly, BTW!)

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp
"Ron Martell" wrote in message
...

NAV2004 *is* a virus, and doubly so when installed on a system running
Windows Me.


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
wtoolsa error Jean Software & Applications 7 May 26th 04 07:58 PM
Wtoolsa Error bob1nor General 2 May 24th 04 05:49 AM
WtoolsA Error EDITH General 2 May 24th 04 05:42 AM
Error Message - Wtoolsa - Kernel32.dll Martin Allan General 5 May 20th 04 05:22 PM
Wtoolsa has caused an error Jeannie General 5 May 19th 04 11:13 PM


All times are GMT +1. The time now is 11:51 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 Win98banter.
The comments are property of their posters.