Delete You Accursed Thing!

[TrailblazingScot]

My computer has a problem...which is adding to a list of problems I have at the moment that is making me just

It is this.

I will be using my computer, after it has been on for a while and especially if I leave it unattended it will become very sluggish when I come back to it. I check task manager and an accursed application called setup 2.exe is using up almost all the CPU

Now, I can't close it without freezing the computer and having restart with power switch So I track the problem down to its source. It is in documents&settings/all users/application data/blue four cake online

There is the setup 2.exe and another thing that popped up, a file named 'ENC DEAF PURE'.

I try to delete these put it says they are in use. I look at task manager and there is no sign of them.


I want to get rid of this program that is slowing down my computer, I've tried the typical spyware programs, anti-virus and it comes up clean. But it is a menace, I don't know how it got there and hell, I've not been downloading anything dodgy for AGES!



If you know how to help, I'd be most grateful, thanks.

 

[Crazy Eddie]

It does sound suspiciously like a virus to me...

Open regedit and look at the keys:
HKEY_CURRENT_USER \Software \Microsoft \Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE \Software\Microsoft \Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE \Software \Microsoft\Windows\CurrentVersion\RunServices
and see if it's got an entry in any of them, this is probably where win is being told to load the program.

 

[TrailblazingScot]

HKEY_LOCAL_MACHINE \Software\Microsoft \Windows\CurrentVersion\Run for the darn cake...I presume I was supposed to just delete it

 

[Zeekater]

1. google the name of the file, there is a site which has a list of common .exe files, you'll probably be directed to that.
2. load up in safe mode, that way, it doesn't run, and you should be able to delete it
3. if above doesn't work, throw your computer in a hot tub. Really.

 

[Crazy Eddie]

HKEY_LOCAL_MACHINE \Software\Microsoft \Windows\CurrentVersion\Run for the darn cake...I presume I was supposed to just delete it

That's the idea.
You can (with it selected) backup the key if you prefer with the export registry file.. first. Deleting the entry should stop the program loading next time you reboot. If it comes back again, then we move to plan B.

 

[TrailblazingScot]

Thanks guys, the problem appears to have gone away, for the time being.

Can't delete the folder though, but there are a few folders that Windows XP like to make undeletable. Like that one that is miles deep and 0 bytes and full of empty civ3 mod folders. Freakin' wierd.

 

[PlutonianEmpire]

Have you tried "safe mode?" Maybe that will help with deleting these darned things.

 

[TrailblazingScot]

Hmm, the problem came back...very odd. Will try safe mode, then the hot tub!

 

[Crazy Eddie]

Also, switch off system restore too while you're trying to remove the program.

 

[TrailblazingScot]

Also, switch off system restore too while you're trying to remove the program.

I've now used a nice little program called Hijackthis to delete it and the parent directory

 

[lord_yoshi]

Boot into Knoppix and delete the folder... XP can't do anything about it.

 

[damunzy]

Ad-aware - Homepage - Download
and SpyBot Search & Destroy - Homepage - Download
Download, update, and run both of these programs. Run full system scan in Ad-aware. This is a good idea for everyone. I'd also suggest allowing TeaTimer (part of Spybot S&D) to run - it will tell you when a program is trying to make registry changes and will allow you to deny those changes.