Quote Originally Posted by NooNoo, from the AV 'sticky'
if you have winlogin.exe running as a process, you have Wintools.
(then you give a link for a removal sequence that I didn't cut 'n' paste)..

So why do you think this ? Its meant to run as a process, all the time ? .. isn't it ? It lives in c:\windows\system32, its when you've got 'other' copies its a problem ?

& I'm also confus-ed about 'wintools' whats that ? - I found this which appears to be some utils bundled & looks innocuous ?