WSup.exe

[Guest]

How do i get rid of WSup.exe?? Does it cause random shutdowns

 

[Carey Frisch [MVP]]

Download Ad-Aware 6.0 and scan your PC for spyware:
http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

 

[Guest]

The following from Nonags.com General forum board
Quot
Go to add/remove programs and see if there is an entry for WinTools. If so, uninstall it. If not then do the following

Go to start>Settings>Control Panel>Administrative Tools>Services Look for "WinTools for IE service" in the right pane. If you find it, right click on it. Stop it by pressing the stop button. Then disable it by clicking on the startup type drop down and selecting "Disable

Then right click on the taskbar and open taskmanager
Go to applications and/or processes and end task on the following (WToolsS.exe should already be stopped from the above step)
WToolsA.ex
WToolsS.ex
WSup.ex

Then close all windows and have hijackthis fix the following

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.hotsearchbox.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.websearch.com/ie.aspx?tb_id=5009
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=5009
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=5009
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dl

O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dl

O4 - HKLM\..\Run: [Belt] C:\WINDOWS\Belt.ex
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common files\WinTools\WToolsA.ex

Then delete the following files (Boot to safe mode if you have to). Just open explorer and browse to the location of the files, right click on them and delete them

File C:\Program Files\Common files\WinTools\WToolsA.ex
File C:\Program Files\Common files\WinTools\WToolsS.ex
File C:\Program Files\Common files\WinTools\WSup.ex
Folder C:\Program Files\Common files\WinTool
File C:\WINDOWS\Belt.ex

Reboot and check your new hijackthis log

Your mileage may vary...Editing the registry is dangerous for neophytes and other newbies, etc, etc, etc. also download HIJACKTHIS.EXE and run it. It will show you all the nasty critters that are taking over Internet Exploder. Download Firefox.exe from mozilla.org and stop using Internet Exploder until you have a GOOD antivirus/popup blocker/adware remover installed

kgf

 

[Guest]

do you have a copy of your xp software? you can boot that and select R to repair your installation. Remove the files I told you about in the previous message. Then you should be okay (YMMV, and No, I don't know everything, but this should work

kgf