Computing.Net > Forums > Security and Virus > Possible Virus -- WtoolsA

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Possible Virus -- WtoolsA

Reply to Message Icon

Name: CaroG
Date: May 28, 2004 at 10:07:08 Pacific
OS: Windows 98
CPU/Ram: 287
Comment:

First of all, my computer seems to be reading from my A:drive every 2-5 minutes when there isn't a disc in. This has been happening for a while now but it only lasts about 2 seconds and though it freezes my computer for those 2 seconds, I didn't think much of it at this point. Recently, a window has been appearing saying something like WtoolsA has performed an illegal operation and will be shut down. When I close the window, my computer reads from the A:drive and the window reappears (and so on...). I read that I needed to uninstall the program Wintools, so I did. However, there is one program that is called "Wintools easy installer" that I cannot uninstall. It says to me "Remove not possible. Remove need active internet connection. Connect and try it again." This, even though I have an internet connection at all times. When I turned on my computer this morning, the program that I had uninstalled last night (Wintools internet explorer v2) (I believe that's the name of it), had reappeared.

I did a search on my computer for Wintools files and found three.
C:Windows/System/Wintools
C:ProgramFiles/CommonFiles/Wintools/Wintools.exe
C:ProgramFiles/CommonFiles/Wintools (File folder)

How can I get rid of this???
Thank you for your help.
Caroline



Sponsored Link
Ads by Google

Response Number 1
Name: johnr
Date: May 28, 2004 at 12:03:15 Pacific
Reply:

Try this web page - it may help:

http://www.pchell.com/support/wintools.shtml

Regards

Johnr


0

Response Number 2
Name: Sabertooth
Date: May 28, 2004 at 12:28:04 Pacific
Reply:

Read the disclaimer @ the bottom of this page, coincidentally I just found out a wintools.exe file within my C:\Program Files\Common Files\Wintools after installing AČ and Ewido, deleted it anyway, but still curious how I got it to begin with.

One way or the other it has managed to slip past all my scumware tools and I have @ all the propular ones innstalled and updated AFAIK.

____________________________
The greatest risk is not taking one


0

Response Number 3
Name: bi0phreak
Date: June 3, 2004 at 06:47:43 Pacific
Reply:

Wintools is a spyware program that is currently not detected by Spybot, Ad-Aware, or a slew of other removal programs. Hijackthis will see it but it simply reloads itself. Typically the prog drops 2 main files "WTOOLSA.EXE" and "WTOOLSS.EXE".

There is also another file that sometimes loads in startup called sdkqh.dll. I think this only shows up in XP/2000 machines though.

Remove the entire WINTOOLS folder "c:\program files\common files\Wintools

Search the registry for "WTOOLSA.EXE" and "WTOOLSS.EXE" --Remove all entries--

After all this do a scandisk, defrag, ect.

Someone needs to add this junk to they're detections!!!! It is a real problem lately! It is a browser hijacker with a BHO and Ad-server built in. A "Blended Threat" that is not easily removed.

Need more info, email me!

::bi0phreak::


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Possible Virus -- WtoolsA

Possible Virus www.computing.net/answers/security/possible-virus/13128.html

Possible virus- please help! www.computing.net/answers/security/possible-virus-please-help/12763.html

possible virus? www.computing.net/answers/security/possible-virus/11794.html