Problem

I keep getting the following error message:

Wtoolsa
This program has performed an illegal operation and will
be shut down.

If the problem persists, contact the program vendor.

When I close out of this window it shuts me down right
away.

You're going to have to do a full scan for spyware and the like Darlene.

But first some info:
http://snipurl.com/7iv6

Then:

Quick and basic scans (hardly definitive, but a start)
Doxdesk parasite scan
http://doxdesk.com/parasite/
Jim Eshelmans WSC on-line quick scan
http://www.aumha.org/a/noads.htm
Bugs Glitches and Stuff-ups (Sandi Hardmeiers site...First rate all the
way)
http://inetexplorer.mvps.org/Darnit.htm

More In-Depth on-line scanners for parasites and Trojans:
GFI free on-line Trojan scanner
http://www.windowsecurity.com/trojanscan/
Sygate Technologies Trojanscan
http://scan.sygatetech.com/pretrojanscan.html
PestPatrol on-line scan
http://www.pestscan.com/home.asp
SpywareChecker on-line scan
http://www.spywareguide.com/txt_onlinescan.html

Parasites, spyware malware basics:
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm

Check for Spyware - How - to's
First, install the respective programs and then update them immediately,
so that they have the current versions, and definitions. Read the Help
Files and Tutorials.
Run them one at a time. With Ad-Aware you may have it
generally clean whatever it finds. The same applies for CWShredder.
Spybot S&D requires special attention (listed below), as does HijackThis
(Only more so. Details listed below) The programs are listed in order of
their general strength, safety, and purpose. It is perhaps best to install
and run these in this order of appearance. All are freeware programs,
but if you are pleased with the results and quality of the utilities,
donations to the respective Authors are cheerfully accepted.

*Most important* - Before you try to remove spyware using any of the
following programs, realize that the process of cleaning and removing
certain spyware and malware may possibly interrupt and kill your internet
connection.
Therefore, you should obtain a copy of LSPFIX, which will then make it
possible for you to re-establish your internet connection should it be
terminated.

Download LSPFIX from either of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (For Win2k or XP)

Another thing to consider doing is to run a program (only run one program
at a time) a few times consecutively. The reason for this is that the
first
pass may kill certain Spyware programs, but may not be able to terminate
and kill all files and programs which may be running at the time.
That is why a second pass may be necessary to be thoroughly effective.

Also, under the most stubborn cases, running the programs in Safe-Mode
will allow for the best cleaning conditions, as there will be a minimum of
interference from processes running in the background.

Ad -Aware
http://www.lavasoftusa.com/support/download/
Ad-Aware Tutorial (might help if you look through this)
http://www.bleepingcomputer.com/foru...howtutorial=48

CWShredder (cleans all Cool Web Search malware)
http://www.majorgeeks.com/download4086.html
CWShredder Tutorial
http://www.bleepingcomputer.com/foru...howtutorial=47

Coolwebsearch Smartkiller
http://www.safer-networking.org/files/delcwssk.zip

The above item is sometimes necessary if CWShredder detects a SmartSearch2
variant on your PC.

Spybot S&D
http://www.safer-networking.org/index.php?page=download
Spybot Tutorial (Must Read)
http://www.safer-networking.org/index.php?page=tutorial
Other tutorials for Spybot S&D (Also must read)
http://www.bleepingcomputer.com/foru...howtutorial=43
http://tomcoyote.com/SPYBOT/index1.php
http://tomcoyote.com/SPYBOT/index2.php

This item below is designed to *prevent* installation of malware and the
like by comparing known CLSID's of these "bad guys" with what is in its
definitions. By enabling a *Kill Bit* it prevents known malignant ActiveX
from being installed or run on your machine. It doesn't remove anything,
nor will it fix anything that is already in your PC. Rather, it will
prevent
installation or re-installation of the item once it has been removed
either manually, or by the use of another program which will perform
the duty of removing the spyware.

SpywareBlaster (prevents installation of spyware, Trojans, etc.)
http://www.javacoolsoftware.com/spywareguard.html
SpywareBlaster Tutorial
http://www.bleepingcomputer.com/foru...howtutorial=49

SpywareGuard (companion program to SWB, above)
http://www.javacoolsoftware.com/spywareguard.html
SpywareGuard Tutorial
http://www.bleepingcomputer.com/foru...howtutorial=50

If you use Spybot S & D, be sure to clean *ONLY* the items displayed in
*RED*. DO NOT clean any items displayed in Black or Green at this time.

Lastly there is HijackThis. Hijack this is a very powerful, last resort
type of program which is generally best used in conjunction with help from
those who deal with the findings of the log created by the HijackThis
scan.
It does nothing in the scan itself; it merely says what is in and running
on
your PC. The items must be checked-marked to be "cleaned". You must
know *exactly* what you are checking-off before you proceed.
If you don't, you can quite possibly disable many useful and vital
functions
of your PC. Remember; read the Tutorials, and seek help at SpywareInfo
Forums, Net-Integration, or TomCoyote forums for safety's sake.

HijackThis
http://www.spywareinfo.com/~merijn/downloads.html
If the preceding site is down, you may get HijackThis from Major Geeks
(amongst other sites as well)
Hijack This (from Major Geeks)
http://www.majorgeeks.com/download3155.html

HijackThis Tutorials **(MUST READ)**
http://www.spywareinfo.com/~merijn/htlogtutorial.html
http://www.bleepingcomputer.com/foru...howtutorial=42
http://hjt.wizardsofwebsites.com/

Where to seek help with your HijackThis scan log
SpywareInfo Forums
http://forums.spywareinfo.com/
other help forums for HijackThis:
Net-Integration
http://forums.net-integration.net/index.php?c=19
TomCoyote
http://forums.tomcoyote.com/index.php?showforum=27

On-Line Virus scanners:

RAV AntiVirus Online Virus Scan
http://www.ravantivirus.com/scan/
Command on Demand
http://www.authentium.com/solutions/cod/index.cfm
Freedom on-line virus check
http://www.freedom.net/viruscenter/o...iruscheck.html
TrendMicro Housecall (also detects some trojans)
http://housecall.trendmicro.com/
BitDefender Scan Online
http://www.bitdefender.com/scan/licence.php

Kapersky Online Virus Scanner
http://www.kaspersky.com/remoteviruschk.html
The above scanner works differently from most; it is a server based
scanner,
and will only scan individual files, or directories which are limited to 1
MB in total size. It will not do a full system scan.

Hauri LiveCall Online virus scanning
http://www.globalhauri.com/html/products/livecall.html
The above is also server based if I remember correctly

Panda on-line virus scan
http://www.pandasoftware.com/activescan/activescan.asp
I've only used this one once or twice, and don't particularly care for it.

McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp
Don't remember if I ever used this one. Not a big McAfee fan.

Had trouble running Symantecs scanner though:

Symantec Security Check (page offers security and/or virus scan)
http://snipurl.com/7gz1


HTH -
--

LuckyStrike


How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
--------------------------------------------------------------------

"Darlene" wrote in message
...
I keep getting the following error message:

Wtoolsa
This program has performed an illegal operation and will
be shut down.

If the problem persists, contact the program vendor.

When I close out of this window it shuts me down right
away.

Note that this sort of problem sometimes indicates there may be other issues
that you are unaware of.
http://inetexplorer.mvps.org/data/wtoolsa.htm
http://www.winpatrol.com/db/freesample/wtoolsa.html
http://www.pchell.com/support/spyware.shtml

Please treat any referenced sites with caution, and always check at
http://www.spywarewarrior.com/rogue_anti-spyware.htm
http://www.netrn.net/spywareblog/
--
Jeff Richards
MS MVP (DTS)
"Darlene" wrote in message
...
I keep getting the following error message:

Wtoolsa
This program has performed an illegal operation and will
be shut down.

If the problem persists, contact the program vendor.

When I close out of this window it shuts me down right
away.