i searched the net, heres what i came up with
http://www.neuber.com/taskmanager/
It's a task manager that shows you much more information about the services running on your system. It allowed me to distinguish between the three (yes, three) copies of services.exe that were running. services.exe is the name for a valid service in Windows, but it's also used by some virus/trojans.
I ran the task manager in conjunction with the SpyBot auto-protection.
If you run the task manager, it will show you all your services that are running and rate them on how dangerous they appear to be. It rates the wtools variants in the 80% range. You can click on a task and click on Remove. It will shut down the service, and remove the file so that it doesn't start up again. The trick is to keep it from re-spawning itself, which is where the SpyBot auto protection came in.
Security Task Manager was able to stop the service and remove it from the startup process. SpyBot almost immediately gave me a warning that whatever was just removed was attempting to reinstall itself. I told it to disallow that action. Once I had "removed" all the bad tasks via the task manager and told SpyBot to keep them from reinstalling, I rebooted, and ran the task manager again. I found a couple of things still lingering, but it only took one more round to finally clear the crap off the system.
SpyBot, HijackThis and AdAware are all still in my bag of tricks, but I agree with you - using them alone didn't work for this problem.
Unless you have already tried this, which you might have, go to control panel on the start menu,go to remove or install programs, find the crap program, and delete it. simple as that.
I was wondering what you meant by SpyBot auto protection. I use spybot a lot, but I have never seen the autoprotect option. I also checked in the help file on it and there was no listing. I tried updating and it said no newer version. Do you have a paid (vs my free) version, or what do you mean by you have it turned on?
There is a new version of Spybot, it's 1.3. It has a live ad/spy/mal/whatever ware blocker. It's good. Download it. Also, Ad-Aware has a new version - SE. There are no more updates for 5 or 6. Get SE.