What is
WinTools?
WinTools appears to be a variant of Huntbar. It
is very persistent and extremely difficult to remove. It creates its
own folder under Program Files/Common Files called WinTools. All of its
files appear to be contained within this folder.
WinTools
may also load as part of other adware programs.
|
|
How
do I Remove WinTools?
Although
there are many different methods across the web to remove this
parasite, here is the most reliable way of doing this.
1) While
online, download the popular HiJackThis
program for Spywareinfo.com.
You may want to read through the HiJackThis
tutorial as well.
2) Reboot
your computer into Safe Mode,
you may want to also Turn
off System Restore in Windows XP/ME as well to remove any
backups of the files you are about to delete.
3) Remove
the Startup Entries in the Registry
- Click on
Start, Run, Type REGEDIT and Click OK
- Click
the pluses(+) next to the following items
- HKEY_LOCAL_MACHINE
- Software
- Microsoft
- Windows
- CurrentVersion
- Run
- Right-Click
on the file WinTools and click DELETE
- Click
the pluses(+) next to the following items
- HKEY_LOCAL_MACHINE
- Software
- Microsoft
- Windows
- CurrentVersion
- RunServices
- Right-Click
on the file WinTools and click DELETE
- Close
REGEDIT
3) Run
HiJackThis (while in Safe Mode) and Delete any entries relating to
WinTools including
O2 - BHO:
(no name) - {87766247-311C-43B4-8499-3D5FEC94A183}-
C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 - BHO: (no name)
- {63B78BC1-A711-4D46-AD2F-C581AC420D41} -
C:\PROGRA~1\COMMON~1\WINTOOLS\BTIEIN.DLL
Although
the following entries should have been deleted in Step 2, delete these
entries if they still exist.
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsS.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WToolsS.exe
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WSup.exe
O4 - HKLM\..\RunServices: [WinTools] C:\Program Files\Common
files\WinTools\WSup.exe
3) Delete
the WinTools folder and all associated files
- Open My
Computer, Drive C, Program Files, Common Files
- Right-click
on the WinTools folder (if it exists) and Delete it
4) You
should also delete
or clean up your hosts file
Windows
95/98/Me c:\windows\hosts
Windows NT/2000/XP Pro c:\winnt\system32\drivers\etc\hosts
Windows XP Home c:\windows\system32\drivers\etc\hosts
5) Reboot the computer in Normal Mode and run HiJackThis again
to test (Wintools should be gone)
Printer Friendly Version of This Page
Bookmark and Share this Article on PCHELL with these Social Networks:
Removal Instructions for Other Programs
Spyware Removal and Other Resources
Essential Tools for Removing Spyware, Adware, and Malware
Rootkit Removal Tools and Help
How to Delete Undeleteable Files
Review of Free Registry Cleaner
How to Manually Run the Microsoft Malicious Software Removal Tool
Review of WinsockFix
How to Remove Windows Diagnostic or Windows Restore malware
Review of SuperAntiSpyware
How to Remove SurferBar
How to Remove Starware
Bargain Buddy Removal Instructions and Help
Bonzi Buddy Removal
Click2FindNow and I-Lookup Removal
Comet Cursor Removal
Electronic Greeting Card Virus - MSDATAACCESS.EXE Removal Instructions and Help
Date Manager Removal
Powered by Zedo Popup Ad Removal Instructions and Help
Search and Destroy Removal Instructions and Help
Spyaxe, Spy Trooper, Spy Sheriff, Brave Sentry and Similar Removal Instructions and Help
TheSpyBot Removal Instructions and Help
Spam Blocker Utility Removal Instructions and Help
DriveCleaner Removal Instructions and Help
Alfacleaner Removal Instructions and Help
Spylocked Removal Instructions and Help
AntivirusGolden Removal Instructions and Help
VirusProtectPro Removal Instructions and Help
UltimateDefender and UltimateCleaner 2007 Removal Instructions and Help
VirusRescue Removal Instructions and Help
PestCapture Removal Instructions and Help
SystemDoctor 2006 Removal Instructions and Help
How to Fix Task Manager disabled by your Administrator
How to Fix Problem Changing Desktop Wallpaper
How to Remove SmitFraud Variants like WinAntivirus Pro 2007 and PestCapture
SurfSideKick Removal Instructions and Help
How to Remove Zango Search Assistant and Toolbar
How to Remove Alot Toolbar
About:Blank Homepage Hijacker Removal Instructions and Help
Kazaa Removal Instructions and Help
How to Disable Windows XP Security Alert Balloons and Notifications
res://random.dll Homepage Hijacker Removal Instructions and Help
IBIS Web Search (websearch.com) Removal Instructions and Help
Open Search Web (Lop.com) Removal Instructions and Help
UPDMGR.EXE Removal Instructions and Help
FCADVICE.EXE Removal Instructions and Help
U3 Smart Drives - What are they and how to remove U3
Dubolom.com Homepage Hijacker Removal Instructions and Help
DSO Exploit Removal Instructions and Help
FastSearch.cc Homepage Hijacker Removal Instructions and Help
My Web Search Removal Instructions and Help
Cursor Mania Removal Instructions and Help
Fun Buddy Icons Removal Instructions and Help
Smiley Central Removal Instructions and Help
My Mail Stamps Removal Instructions and Help
My Mail Stationery Removal Instructions and Help
My Mail Signatures Removal Instructions and Help
Fun Web Products Popular Screensavers Removal Instructions and Help
Webfetti Removal Instructions and Help
What is PDF Spam and Does it Contain Viruses
Gator Software Removal
Hugesearch.net Homepage Hijacker Removal Instructions and Help
Search-Space.com and Start-Space.com Homepage Hijacker Removal Instructions and Help
How to Remove Global-Finder.com Homepage Hijacker
Globaltoolbar Removal
GoHip Software Removal
HotBar Toolbar Removal
Huntbar and Search Toolbar Info and Removal
Look2Me Removal Instructions and Help
Lookfor.cc (res://mshp.dll/index.html) Homepage Hijacker Removal Instructions and Help
MaximumSearch.net Homepage Hijacker Removal Instructions and Help
Ncase Removal Instructions and Help
People OnPage Toolbar Info and Removal
Precision Time Removal
Prolivation.com Removal
SaveNow and NewDotNet Removal
SearchMyRequest.com Homepage Hijacker Removal Instructions and Help
Smartsearch.ws Homepage Hijacker Removal Instructions and Help
SysUpd.exe (TSCash) Removal Instructions and Help
Ezula TopText (yellow underlined links) Removal Instructions and Help
How to Remove SpeedBlaster and MemoryMeter
TopRebates and WebRebates Removal Instructions and Help
Twaintec.dll Removal Instructions and Help
Viewpoint Removal Instructions and Help
WeatherBug Removal
WildTangent Removal Instructions and Help
WinTools Removal Instructions and Help
Xupiter Removal
Xzoomy.com Removal
ZY Web Search (db105.com) Removal
|