Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Vista, Windows 7 or later Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Vista, Windows 7 or later Support Concerns all issues with using LimeWire or WireShare in the Vista and Windows 7, 8 or 10 operating system


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old December 16th, 2007
Novicius
 
Join Date: November 20th, 2007
Posts: 4
pluck07 is flying high
Exclamation Virus/Worm???

Hello everyone, this is my first time posting. I looked through the forum and several others and couldn't find anything quite the same, so I'm posting my problem individually.

I'm running windows vista, with System Mechanic 7 pro and iolo virus protection and iolo firewall.

Just the other day, my limewire started opening on it's own every time I close it. So I just uninstalled it. I know what you all might be thinking though. (Oh great, another Worm.Win32.VB.an attack). But, I believe I have a mutated version of this worm, because my task manager still works. Another thing that leads me to believe it's not that worm is the fact that I don't have the winupdates.exe problem that's common with that worm.

Instead, ONLY when I connect to the internet, cmd.exe starts up (the windows command prompt app) and the CPU usage goes straight up to between 40%-50% and sometimes as high as 90%-100% on that one process. Another thing I notice is that I have found some unusual files lurking on my computer. They are as follows:

In the C:\Users\MyName directory I have these files (I'll put the exact file names in quotes):

"a" (which is a zipped file and is 623KB in size)
"Crack" (which is an application file that is 821KB in size)
"services" (which is an application file that is 36KB in size)
"vbzip10.dll" (which is an application extension and is 144KB in size)

Now, I've deleted these files running normally and in safe mode but they come back every time I restart the computer, so that tells me there are relevant files in my system that help these return. I've also used my antivirus and done full system scans, I've used my system mechanic, Ad-Aware 6pro, CCleaner and spyHunter and they all return zero results. I've tried to do my own homework and can't find anything relating to my exact problem, so I came here.

Any ideas???
Reply With Quote
  #2 (permalink)  
Old December 16th, 2007
birdy's Avatar
Airhead
 
Join Date: October 18th, 2004
Location: Perth, Australia
Posts: 889
birdy has a distinguished reputationbirdy has a distinguished reputation
Default

There are a few different fixes to try in the thread below.
http://www.gnutellaforums.com/genera...s-options.html

If nothing there works, try going to one of the help sites listed in that thread
Reply With Quote
  #3 (permalink)  
Old December 16th, 2007
Novicius
 
Join Date: November 20th, 2007
Posts: 4
pluck07 is flying high
Default

yeah, I've already tried that...but I suppose I'll check the other help sites and see what I come up with. Thank you!
Reply With Quote
  #4 (permalink)  
Old December 16th, 2007
birdy's Avatar
Airhead
 
Join Date: October 18th, 2004
Location: Perth, Australia
Posts: 889
birdy has a distinguished reputationbirdy has a distinguished reputation
Default

Did you try the Vundo fix, as well as the BFU? A few people have had some probs with the BFU.

Did you download AVG Free AV &scan with that? Even though you've scanned with other AVs & they haven't found anything, AVG sometimes finds malware that other apps miss. Just remember to update AVG before scanning.
Reply With Quote
  #5 (permalink)  
Old December 16th, 2007
Novicius
 
Join Date: November 20th, 2007
Posts: 4
pluck07 is flying high
Default

yeah, I've tried both....like I was saying, this is a mutated version of what everyone has been getting. I'm lead to believe that based on what I stated in the original post....BFU nor the vundo fix work...BFU is just ineffective for what I have, and vundo detects nothing.
Reply With Quote
  #6 (permalink)  
Old December 16th, 2007
garbagefan2's Avatar
Valued Member contributor
 
Join Date: April 6th, 2006
Location: Windy City
Posts: 751
garbagefan2 is a great assister to others; your light through the dark tunnel
Default

Go here, and do what they say. Just make a post with a hijackthis log.

BleepingComputer.com - Computer Help Forums
Reply With Quote
  #7 (permalink)  
Old December 17th, 2007
Novicius
 
Join Date: November 20th, 2007
Posts: 4
pluck07 is flying high
Default

yeah, I'm on spyware warrior's site and posted a hijackthis log on there, seeing what they can do. Thank you both!!!
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 08:15 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.