Windows Explorer Error

I am getting the following error when I start my machine
and it is making preparation to load everything:

Explorer has caused an error ~8357785974.TAP

the screen just sits there and there is no start button,
the screen saver is showing and the calendars are showing
as if in a normal mode. When I go to Task Manager the
following things are showing as running and one of them no
matter what I do will not "end task", and that is Wtoolsa.

The following task are usually sitting in Task Manager and
then shows when I try to end them as not responding:

SYMUNDO, Devldr16, Systray, Wtoolsa, Wsup

I need help. Windows ME was on my computer when it came
and I have no where to go and get any Manufacturer
software help.

If you can please send the help to
and to
(at this address maybe my children can relay the message
to me) THANK YOU

Oh dear! What a lot of malware you seem to have running on your PC!

"Explorer has caused an error in ~8886728588.TMP"
The error "Explorer has caused an error in ~8886728588.TMP" or similar is
due to malware of some sort, possibly the ClientMan/MSMC browser plugin
which is used to push ads to you and redirect your searches. For some
details of ClientMan see
ttp://www.pestpatrol.com/ms/pestinfo/c/clientman.asp and also
http://www.2-spyware.com/parasite-clientman.html. See also
http://www.doxdesk.com/parasite/ClientMan.html although this page makes no
reference to the MSMC variant.

Try booting to Safe Mode and emptying both your Windows\Temp folder and
also your Temporary Internet Files (Control Panel | Internet Options |
General | Delete Files and make sure you check the box "Delete all offline
content"). Next open MSConfig, (Start | Run, type MSConfig in the box and
click OK), open the Startup tab and look for an uncheck any rogue entries.

Boot back into Normal Mode.

"Wtoolsa.exe and Wsup"
Wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar
family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp). It
certainly doesn't form a part of the Win Me operating system. One install
mechanism it uses is if you choose to install the toolbar from
xxx.websearch.com.

Boot to Safe Mode, now enable the viewing of all files and folders in
Explorer (Tools | Folder Options | View and check "Show hidden files and
folders" and uncheck "Hide protected operating system files"). Next open
MSConfig (Start, Run, enter MSConfig in the box and click OK), open the
Startup tab and uncheck the entry being used to launch wstoolsa.exe,
possibly labelled something like WinTools as well as any entries referring
to wtoolsb.dll, wsup.exe and tb_setup.exe.

Browse to and delete the contents of your C:\Windows\Temp folder and also
clear you Temporary Internet Files (Internet Options | General | Delete
Files and ensure that you check the box "Delete all offline content", then
click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for WinTools.

You should also delete the entire Wintools folder which is probably
located as a sub-folder in C:\Program Files\Common Files or alternatively
in C:\Windows\System. Check for and delete all copies of wtoolsa.exe,
wtoolsb.dll, wsup.exe and tb_setup.exe.

Now reboot back into Normal Mode and check your system for commercial
parasites.

This would be a good time to download yourself a copy of the free Ad-Aware
SE Personal edition from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot Search &
Destroy (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as
good as when you last updated their reference files. I also use a program
called BHODemon (http://www.definitivesolutions.com/bhodemon.htm) that
checks for unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the
best way of getting rid of the many forms of the CoolWebSearch hijacker
details of which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a folder called HJT on C: (not on your desktop nor in your temp
folder) and copy the file you downloaded to that folder. Close as many
applications as you can including all instances of Internet Explorer.
Enable Explorer to see all files and folders (Tools | Folder Options |
View and check "Show hidden files and folders" and uncheck "Hide protected
operating system files") and then run hijackthis.exe and post back the log
to either the HijackThis Forum at http://forums.spywareinfo.com/ or
alternatively http://forum.aumha.org/viewforum.php?f=30 and hopefully this
will enable someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and Search
Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--?
Mike Maltby MS-MVP



Patricia wrote:

I am getting the following error when I start my machine
and it is making preparation to load everything:

Explorer has caused an error ~8357785974.TAP

the screen just sits there and there is no start button,
the screen saver is showing and the calendars are showing
as if in a normal mode. When I go to Task Manager the
following things are showing as running and one of them no
matter what I do will not "end task", and that is Wtoolsa.

The following task are usually sitting in Task Manager and
then shows when I try to end them as not responding:

SYMUNDO, Devldr16, Systray, Wtoolsa, Wsup

I need help. Windows ME was on my computer when it came
and I have no where to go and get any Manufacturer
software help.

If you can please send the help to
and to
(at this address maybe my children can relay the message
to me) THANK YOU

Oh dear! What a lot of malware you seem to have running on your PC!

"Explorer has caused an error in ~8886728588.TMP"
The error "Explorer has caused an error in ~8886728588.TMP" or similar is
due to malware of some sort, possibly the ClientMan/MSMC browser plugin
which is used to push ads to you and redirect your searches. For some
details of ClientMan see
ttp://www.pestpatrol.com/ms/pestinfo/c/clientman.asp and also
http://www.2-spyware.com/parasite-clientman.html. See also
http://www.doxdesk.com/parasite/ClientMan.html although this page makes no
reference to the MSMC variant.

Try booting to Safe Mode and emptying both your Windows\Temp folder and
also your Temporary Internet Files (Control Panel | Internet Options |
General | Delete Files and make sure you check the box "Delete all offline
content"). Next open MSConfig, (Start | Run, type MSConfig in the box and
click OK), open the Startup tab and look for an uncheck any rogue entries.

Boot back into Normal Mode.

"Wtoolsa.exe and Wsup"
Wtoolsa.exe is malware and appears to be a new member of the IBIS Toolbar
family (http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp). It
certainly doesn't form a part of the Win Me operating system. One install
mechanism it uses is if you choose to install the toolbar from
xxx.websearch.com.

Boot to Safe Mode, now enable the viewing of all files and folders in
Explorer (Tools | Folder Options | View and check "Show hidden files and
folders" and uncheck "Hide protected operating system files"). Next open
MSConfig (Start, Run, enter MSConfig in the box and click OK), open the
Startup tab and uncheck the entry being used to launch wstoolsa.exe,
possibly labelled something like WinTools as well as any entries referring
to wtoolsb.dll, wsup.exe and tb_setup.exe.

Browse to and delete the contents of your C:\Windows\Temp folder and also
clear you Temporary Internet Files (Internet Options | General | Delete
Files and ensure that you check the box "Delete all offline content", then
click OK and Apply.

Now check Add/Remove Programs and uninstall any entry for WinTools.

You should also delete the entire Wintools folder which is probably
located as a sub-folder in C:\Program Files\Common Files or alternatively
in C:\Windows\System. Check for and delete all copies of wtoolsa.exe,
wtoolsb.dll, wsup.exe and tb_setup.exe.

Now reboot back into Normal Mode and check your system for commercial
parasites.

This would be a good time to download yourself a copy of the free Ad-Aware
SE Personal edition from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot Search &
Destroy (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as
good as when you last updated their reference files. I also use a program
called BHODemon (http://www.definitivesolutions.com/bhodemon.htm) that
checks for unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the
best way of getting rid of the many forms of the CoolWebSearch hijacker
details of which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a folder called HJT on C: (not on your desktop nor in your temp
folder) and copy the file you downloaded to that folder. Close as many
applications as you can including all instances of Internet Explorer.
Enable Explorer to see all files and folders (Tools | Folder Options |
View and check "Show hidden files and folders" and uncheck "Hide protected
operating system files") and then run hijackthis.exe and post back the log
to either the HijackThis Forum at http://forums.spywareinfo.com/ or
alternatively http://forum.aumha.org/viewforum.php?f=30 and hopefully this
will enable someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and Search
Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--?
Mike Maltby MS-MVP



Patricia wrote:

I am getting the following error when I start my machine
and it is making preparation to load everything:

Explorer has caused an error ~8357785974.TAP

the screen just sits there and there is no start button,
the screen saver is showing and the calendars are showing
as if in a normal mode. When I go to Task Manager the
following things are showing as running and one of them no
matter what I do will not "end task", and that is Wtoolsa.

The following task are usually sitting in Task Manager and
then shows when I try to end them as not responding:

SYMUNDO, Devldr16, Systray, Wtoolsa, Wsup

I need help. Windows ME was on my computer when it came
and I have no where to go and get any Manufacturer
software help.

If you can please send the help to
and to
(at this address maybe my children can relay the message
to me) THANK YOU