wtoolsa problem

i keep getting a message that "wtoolsa" has crashed. i
click ok and the computer keeps working but it pops up
about every 60 secs or so. i thought it was part of norton
av so i uninstalled but it didn't go away. i searched for
it and it is located at c:\program files\common
files\wintools so i assume it's a windows application. it
has the explorer icon in front of it's name in the search
and file extension .exe. the only time it doesn't do it is
when i'm online. any suggestions would be greatly
appreciated. it doesn't crash the puter, but it drives me
crazy! thanks

Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes, if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the thread:
http://computercops.info/modules.php...topic&p=172295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forum.aumha.org/viewforum.php?f=30
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

In your post, please state your problem clearly and what you've done so far to fix
it.

See the "housekeeping" you should complete before you post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"chris" wrote in message
...
i keep getting a message that "wtoolsa" has crashed. i
click ok and the computer keeps working but it pops up
about every 60 secs or so. i thought it was part of norton
av so i uninstalled but it didn't go away. i searched for
it and it is located at c:\program files\common
files\wintools so i assume it's a windows application. it
has the explorer icon in front of it's name in the search
and file extension .exe. the only time it doesn't do it is
when i'm online. any suggestions would be greatly
appreciated. it doesn't crash the puter, but it drives me
crazy! thanks

glen, thanks for your info. i will certainly look into
that at home soon. i didn't realize it was a virus, it
looked like part of windows; like it belonged there. i
guess that's what viruses do, though. thanks again.

chris

-----Original Message-----
Have a look here -
PC Hell: How to Remove WinTools (Huntbar variant):
http://www.pchell.com/support/wintools.shtml

My Basic Instructions -

Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the
Windows 98 Startup menu
(boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Click Start Settings Folder Options View tab, and
click to enable "Show All
Files" and click OK.

Press Ctrl+Alt+Delete, and End Task on these processes,
if they appear:
WToolsA.exe
Wsup.exe

Then delete the Wintools folder, run Hijack This in Safe
Mode, and use it to remove
these entries:

R3 - URLSearchHook: (no name) -
{87766247-311C-43B4-8499-3D5FEC94A183} -C:\PROGRA~1
\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-
3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the
bottom of the thread:
http://computercops.info/modules.php?
name=Forums&file=viewtopic&p=172295

Here is my standard response on how to download and use
Hijack This:

Download, unzip, and run Hijack This from one of these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at one
of these forums:
http://forum.aumha.org/viewforum.php?f=30
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

In your post, please state your problem clearly and what
you've done so far to fix
it.

See the "housekeeping" you should complete before you
post your log:
http://aumha.org/forum/viewtopic.php?t=4075

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"chris" wrote in
message
...
i keep getting a message that "wtoolsa" has crashed. i
click ok and the computer keeps working but it pops up
about every 60 secs or so. i thought it was part of
norton
av so i uninstalled but it didn't go away. i searched
for
it and it is located at c:\program files\common
files\wintools so i assume it's a windows application.
it
has the explorer icon in front of it's name in the
search
and file extension .exe. the only time it doesn't do it
is
when i'm online. any suggestions would be greatly
appreciated. it doesn't crash the puter, but it drives
me
crazy! thanks

.