Solved

What does webnut.exe do?

Posted on 2004-10-21
261 Views
Last Modified: 2010-04-11
Does anyone know what the webnut.exe process is? It seems to be taking a lot of CPU processing power on a machine running Windows XP. The machine has been running much slower than usual lately, so I ran spybot search & destroy. It found a bunch of stuff that it said it repaired (except for DSO Exploit that it finds every time). But suddenly today the machine is so slow as to be unworkable-five to ten minutes just to open a control panel window for example. Any ideas on what I should do? Or any ideas on what else to look for? This machine was running McAfee anti-virus until about two weeks ago when that program couldn't run because it said it couldn't find a file it needed. I could really use some help. If the security section isn't the best place for this post, just let me know. Thank you.
0
Question by:booktech
    5 Comments
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    Hello booktech =)

    Its a faked process, boot ur system in safmeode, and search for this file on ur hard drive and registry, delete all its references and the file itself !!
    Check if its coming back again or not ??
    0
     
    LVL 49

    Expert Comment

    by:sunray_2003
    Use this to see
    http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

    if that process is associated with any application.
    I donot see any info about it .
    0
     
    LVL 49

    Expert Comment

    by:sunray_2003
    use this
    Start --> run --> Type in "msconfig" and press "Enter"
    goto Startup tab
    Disable all the applications there except Anti-virus.Reboot the machine and check if the process comes back.
    If not, then enable one at a time in the same startup tab and find the application that might cause this
    at startup

    and check entries here
    http://windowsxp.mvps.org/Startup.htm

    so that it doesnot start during startup of windows..
    0
     
    LVL 65

    Accepted Solution

    by:
    Also use hiajckthis to know what other faked starting and running processes are present on ur system !! :)

    Download HijackThis v1.98.2 from here, run it and Save the LOG file:
    http://tools.radiosplace.com/HijackThis.exe

    Then Post that log at this site >> http://www.hijackthis.de/index.php?langselect=english
    and it will automatically analyse it for u,,, Fix the entries which it labels as Nasty :)
    To Fix, check the lines and click on Fix Checked !!

    CAUTION: Before fixing the entries in hijackthis, make sure that they are really Nasty and can be deleted, better u first research for it on Google and then when u will confirm that they shud be deleted, Fix them. And whenever u run Hijackthis, run it from a New folder on ur desktop, so that in case of any problem, u can take advantages of its created backups of fixed items. And in case if u still face problems in dealing with it, just analyse ur log at the above site, and then scroll down where u will see a Save Analyse button, hit it and it will save ur Log Analysation, then copy the link of that page and paste it here, and we will check it for u :)
    0
     
    LVL 5

    Expert Comment

    by:Hammadian2
    there's no common thing known as webnut.exe :)
    if u dont need it just open run
    type msconfig
    goto startup

    and remove it forever from there
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    Healthcare organizations in the United States must adhere to the guidance of both the HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act) for securing and protec…
    Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    846 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    3 Experts available now in Live!

    Get 1:1 Help Now