Re: Help with slow PC...exe files seem to be taking over

From: Sleep deprived (Sleepdeprived_at_discussions.microsoft.com)
Date: 12/03/04 

Date: Fri, 3 Dec 2004 07:45:12 -0800

Thank you Malke, your insite seems detailed and extensive, I will try all you
mentioned. Thanks again for helping a novice.

"Malke" wrote:

> Sleep deprived wrote:
>
> > Hope thier is help for me!
> > Notice my PC (windowsXP) slowing down badly-- Looked over the taskmgr
> > and noticed tow files eating up alot of space and cpu thet are
> > "playras.exe" and nutcom.exe" I ahve no idea what they are for. I have
> > tried to delete them found them in prefetch folder. They keep coming
> > back! Tried turning off restore then deleting, tried deletiing all
> > files in prefetch stil the playras and nutcom are returned?
> > Any ideas -- help --sugestion would make my nights less sleep
> > deprived!
>
> Since neither of those items brought up any links in Google, it is
> probable that they are malware. Do the normal troubleshooting steps:
>
> 1) Scan in Safe Mode with current version (not earlier than 2003)
> antivirus using updated definitions.
>
> 2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
> programs are free, so use them both since they complement each other.
> There is a new version of CWShredder from Intermute. I would not
> install the other Intermute programs, however. Alternately, there are
> CoolWebSearch malware removal steps at SilentRunners.
>
> Be sure to update these programs before running, and it is a good idea
> to do virus/spyware scans in Safe Mode. Make sure you are able to see
> all hidden files and extensions (View tab in Folder Options).
>
> HijackThis is an excellent tool to discover and disable hijackers, but
> it requires expert skill. See below for HijackThis links. A combination
> of HijackThis and About:Buster works well in removing the About:Blank
> homepage hijacker. Again, this is an expert tool and novices should get
> help with it.
>
> 3) If you are running Windows ME or XP, you should disable/enable System
> Restore because malware will be in the Restore Points. With ME, you
> must disable System Restore completely. With XP, you can delete all but
> the most recent (presumably clean) System Restore point from the More
> Options section of Disk Cleanup (Run>cleanmgr).
>
> 4) Make sure you've visited Windows Update and applied all security
> patches. Do not install driver updates from Windows Update.
>
> 5) Run a firewall.
>
> Links to help with malware:
>
> Software/Methods:
> http://www.safer-networking.org - Spybot Search & Destroy
> http://www.lavasoftusa.com - Ad-aware
> http://www.majorgeeks.com - good download site
> http://www.intermute.com/spysubtract/cwshredder_download.html
> http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
>
> HijackThis:
> http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
> Eshelman
> http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
> forum
> http://www.wilderssecurity.com/
> http://forums.tomcoyote.org/
> http://www.spywareinfo.com/forums/
>
> General:
> http://forum.aumha.org/ - look under "Security" for various forums
> http://rgharper.mvps.org/cleanit.htm
> http://mvps.org/winhelp2002/unwanted.htm
> http://www.aumha.org/a/parasite.htm - The Parasite Fight
> http://www.spywarewarrior.com/rogue_anti-spyware.htm
>
> Malke
> --
> MS MVP - Windows Shell/User
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
>

Relevant Pages

  • Re: RUNDLL Error
    ... Malke Wrote: ... I have performed a system restore to date ... See below for HijackThis links. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: unwilling pop out webpage:
    ... Thanks malke for that response to sams problem. ... now going to delete all restore points after reading your post as I have xp... ... > You have malware on your computer. ... > scan with HijackThis. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with slow PC...exe files seem to be taking over
    ... CoolWebSearch malware removal steps at SilentRunners. ... See below for HijackThis links. ... Restore because malware will be in the Restore Points. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: unwanted dialer
    ... See below for HijackThis links. ... > Restore because malware will be in the Restore Points. ... > the most recent (presumably clean) System Restore point from the More ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: badurl.grandstreetinteractive.com
    ... > system restored at a point, ... A combination of HijackThis and About:Buster ... make sure you've visited Windows Update and applied all security ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
Loading