PDA

View Full Version : Wtoolsa illegal operations


kevin duffy
May 22nd 04, 04:44 PM
Hi;

I am running windows 98 SE and all of a sudden I keep
getting this error message from wtoolsa "this program has
performed an illegal operation and will shut down". It is
persistant. Is there a link where I can d/l this portion
of windows and reload it?
In an effort to stop it I deleted the wtools files and
performed a disk clean-up. Poof! But the error persists
to the point where it locks me out of other applications.

Hellllp!

Andrew H. Carter
May 22nd 04, 05:17 PM
On Sat, 22 May 2004 08:44:59 -0700, "kevin duffy"
> wrote:

>Hi;
>
> I am running windows 98 SE and all of a sudden I keep
>getting this error message from wtoolsa "this program has
>performed an illegal operation and will shut down". It is
>persistant. Is there a link where I can d/l this portion
>of windows and reload it?
> In an effort to stop it I deleted the wtools files and
>performed a disk clean-up. Poof! But the error persists
>to the point where it locks me out of other applications.
>
> Hellllp!


Don't believe it is part of Windows, rather a third party game
software suite.

http://search.yahoo.com/search?fr=slv1-&ei=UTF-8&p=wtools

Sincerely,

Andrew H. Carter

Ron Martell
May 22nd 04, 06:57 PM
"kevin duffy" > wrote:

>Hi;
>
> I am running windows 98 SE and all of a sudden I keep
>getting this error message from wtoolsa "this program has
>performed an illegal operation and will shut down". It is
>persistant. Is there a link where I can d/l this portion
>of windows and reload it?
> In an effort to stop it I deleted the wtools files and
>performed a disk clean-up. Poof! But the error persists
>to the point where it locks me out of other applications.
>
> Hellllp!

Wtoolsa is a new version of Huntbar spyware, and the spyware removal
tools have not been updated to remove it as yet, although this is
expected in the next few days.

Here is a link that has some information on removing it:

http://computercops.info/modules.php?name=Forums&file=viewtopic&p=172295

Please read the entire discussion before doing anything. And be very
very careful with HiJackThis as it lists everything that loads at
startup, including all of the good stuff. Be sure you understand
exactly what an item does and have confirmed that it should be removed
before doing so.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

Lucy
May 23rd 04, 05:47 AM
I am getting the same exact thing! I cannot get rid of
the error message either. It shows WTOOLSA caused an
invalid fault module in Kernel32.DLL Any comments would
be appreciated. I did a virus check on all the files,
error still persists. It appears before I can even sign on
to the internet, and usually disappears once I am on.
>-----Original Message-----
>Hi;
>
> I am running windows 98 SE and all of a sudden I keep
>getting this error message from wtoolsa "this program has
>performed an illegal operation and will shut down". It
is
>persistant. Is there a link where I can d/l this portion
>of windows and reload it?
> In an effort to stop it I deleted the wtools files and
>performed a disk clean-up. Poof! But the error persists
>to the point where it locks me out of other applications.
>
> Hellllp!
>.
>

Richard G. Harper
May 23rd 04, 11:03 AM
Ron Martell posted a solution to your problem 11 hours before you posted
your question. Please expand the discussion thread and read his reply.

--
Richard G. Harper [MVP Win9x]
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


"Lucy" > wrote in message
...
> I am getting the same exact thing! I cannot get rid of
> the error message either. It shows WTOOLSA caused an
> invalid fault module in Kernel32.DLL Any comments would
> be appreciated. I did a virus check on all the files,
> error still persists. It appears before I can even sign on
> to the internet, and usually disappears once I am on.
> >-----Original Message-----
> >Hi;
> >
> > I am running windows 98 SE and all of a sudden I keep
> >getting this error message from wtoolsa "this program has
> >performed an illegal operation and will shut down". It
> is
> >persistant. Is there a link where I can d/l this portion
> >of windows and reload it?
> > In an effort to stop it I deleted the wtools files and
> >performed a disk clean-up. Poof! But the error persists
> >to the point where it locks me out of other applications.
> >
> > Hellllp!
> >.
> >

Ron Badour
May 23rd 04, 03:35 PM
I have recommended this several times and asked for feedback but have not
received any so I don't know how effective my advice might be:

Spyware/scumware/adware are causing numerous system problems. I recommend
you download and use the following programs and consider removing everything
these programs identify. Be aware that there are frequent updates to these
programs and you need to check for them before every use.

AdAware: http://www.lavasoftusa.com/software/adaware/

CWShredder: http://www.spywareinfo.com/~merijn/cwschronicles.html (download
link near the bottom)

Spybot: http://www.safer-networking.org/

If these programs don't help, go to:

http://computercops.info/modules.php?name=Forums&file=viewtopic&p=172295

Scroll down until you see the post from Yellowhammer. I don't know that his
fix works but it is the most comprehensive reply I found on Wtoolsa.

Let us know what works.


--
Regards

Ron Badour, MS MVP for W98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo

"Lucy" > wrote in message
...
> I am getting the same exact thing! I cannot get rid of
> the error message either. It shows WTOOLSA caused an
> invalid fault module in Kernel32.DLL Any comments would
> be appreciated. I did a virus check on all the files,
> error still persists. It appears before I can even sign on
> to the internet, and usually disappears once I am on.
> >-----Original Message-----
> >Hi;
> >
> > I am running windows 98 SE and all of a sudden I keep
> >getting this error message from wtoolsa "this program has
> >performed an illegal operation and will shut down". It
> is
> >persistant. Is there a link where I can d/l this portion
> >of windows and reload it?
> > In an effort to stop it I deleted the wtools files and
> >performed a disk clean-up. Poof! But the error persists
> >to the point where it locks me out of other applications.
> >
> > Hellllp!
> >.
> >

MARY PELLEGRIN
May 24th 04, 04:51 AM
HI KEVIN DUFFY,
DID YOU FIGURE OUT WHAT TO DO ABOUT YOUR ILLEGAL MESSAGE BECAUSE I KEEP GETTING THE SAME WINDOW COMING UP AND IT'S DRIVING ME CRAZY. I'VE BEEN CHATTING WITH MY INTERNET PROVIDER BUT THIER ADVISE DID NOT WORK. AND I TRIED DELETING THE WTOOLS FILE BUT THAT DIDN'T WORK. PLEASE GIVE ME SOME ADVISE IF YOU HAVE SOME INFO. THANK YOU

glee
May 24th 04, 04:56 AM
Restart in Safe Mode:
-Start the computer and hold down the CTRL key till the Windows 98 =
Startup menu (boot menu) appears.
-Use the arrow keys to select "Safe Mode" and press Enter.

Then delete the Wintools folder and run Hijack This in Safe Mode, and =
use it to remove these entries:

C:\Program Files\Common files\WinTools\WToolsA.exe
C:\Program Files\Common files\WinTools\WToolsS.exe
C:\Program Files\Common files\WinTools\WSup.exe

R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} =
-C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} -
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common =
Files\WinTools\WToolsA.exe

Also, see "YellowHammer's" procedure here, near the bottom of the =
thread:
http://computercops.info/modules.php?name=3DForums&file=3Dviewtopic&p=3D1=
72295

Here is my standard response on how to download and use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, =
doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save =
Log" button.
Press that, save the log somewhere you can find it (Desktop, My =
Documents, or similar).
Most of what it lists will be harmless or even required, so do NOT fix =
anything yet.

Copy the log files and paste them into a new post at one of these =
forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=3D30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com=20
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located here:
http://tomcoyote.com/hjt/
and an in-depth tutorial is here:
http://aumha.org/a/hjttutor.htm
--=20
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"MARY PELLEGRIN" > wrote in message =
...
> HI KEVIN DUFFY,
> DID YOU FIGURE OUT WHAT TO DO ABOUT YOUR ILLEGAL MESSAGE BECAUSE =
I KEEP GETTING THE SAME WINDOW COMING UP AND IT'S DRIVING ME CRAZY. =
I'VE BEEN CHATTING WITH MY INTERNET PROVIDER BUT THIER ADVISE DID NOT =
WORK. AND I TRIED DELETING THE WTOOLS FILE BUT THAT DIDN'T WORK. PLEASE =
GIVE ME SOME ADVISE IF YOU HAVE SOME INFO. THANK YOU