Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #81 (permalink)  
Old November 14th, 2005
Novicius
 
Join Date: October 29th, 2005
Posts: 4
joe_danger is flying high
Default

Yes, as he says it seems that this virus(or trojan more correctly i thing) has many different names. But sometimes it only some common sense to see if there's a name in the taskman that seems suspicious or that you don't remember.

Doing a google search is useful at most times or use tools like Spybot, Microsoft AntiSpyware, WinTasks, Security Task Manager, etc that can help to identify possible virus and adware.

It's not to difficult to get rid of this annoying pest and thankful there's many information about how to do so, so you're not alone.
Reply With Quote
  #82 (permalink)  
Old December 19th, 2005
Novicius
 
Join Date: December 19th, 2005
Posts: 1
kbgrind91 is flying high
Thumbs up

Ok, this same thing happened to me, but a different name was used for the crappy virus.
it was MsUpdate.exe
whoever made that stupid thing should jump out a window while lit on fire
btw that guy before was right. he should be applauded for all of that effort he took.
Reply With Quote
  #83 (permalink)  
Old February 9th, 2006
Novicius
 
Join Date: February 9th, 2006
Posts: 2
Xinderellah is flying high
Default Delting limewire??

When you say that, does it mean like completely deleting it, so ALL of my shared files get deleted?? Because that is a hugge sacrifice for me :-)
Reply With Quote
  #84 (permalink)  
Old February 9th, 2006
Lord of the Rings's Avatar
ContraBanned
 
Join Date: June 30th, 2004
Location: Middle of the ocean apparently (middle earth)
Posts: 656
Lord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputation
Default

There's more descriptions here about how to fix it LimeWire continually Popping up & also Opening at System Startup (click on link) Also, if you're not sure how to go about it yourself, register at Norbie's site & get him to help you. See NorbiesWorld (click on link)
Reply With Quote
  #85 (permalink)  
Old February 9th, 2006
Novicius
 
Join Date: February 8th, 2006
Posts: 3
Legato is flying high
Default

Quote:
Originally posted by BobbyNaini
I had this exact same problem, and after literally 24 hours of analyzing every inch of my computer, I solved the problem. I suspect that based on your descriptions of the problem (which I had as well), you are infected with a virus. It's unbelievable that none of my AntiVirus packages picked up this infection.

For me, everytime I restarted my computer, Limewire would automatically load up. Even if I closed it, it would just open back up again. On top of this, I could not even access the Task Manager in Windows XP to allow me to force a shutdown of Limewire. I hit CTRL-ALT-DEL and nothing would happen.

Anyways, here are the steps that need to be taken.

1) Uninstall Limewire. You can reinstall it at the end of these steps.

2) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

4) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

5) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

6) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

7) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

8) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

9) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

10) Finally, click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

11) Now restart your computer. Reinstall Limewire.

This should hopefully fix your problem.

Bobby Naini
Man, I don't know if it's only me or w/e, but my task manager wouldnt open either, so I C and P like you said, but the only thing that it shows are the tasks....and that's it....nothing else...no processor tab...nothing, just the tasks....wtf, my comp is ****** for sure....
Reply With Quote
  #86 (permalink)  
Old February 10th, 2006
Grandpa's Avatar
Valued Member contributor
 
Join Date: February 20th, 2005
Location: Depends on the Day
Posts: 3,012
Grandpa will become famous soon enough
Default

In the post above yours by the lord there is a link to Norbies world go there he will help you fix it.
__________________

java.com - Hot Games, Cool Apps









A little common sense goes a long way

Later Grandpa
Reply With Quote
  #87 (permalink)  
Old February 26th, 2006
Novicius
 
Join Date: February 26th, 2006
Posts: 1
TURBODIESEL is flying high
Default

OK ive just spent 6 hours trying to fix this and in the end, the solution was so simple!
My pc had the classic symptoms:-
Limewire opening repeatedly, 15 seconds after it was closed.
ctr,alt,delete was not displaying task manager.
I found 2 'strange' folders on my pc, the 1st one was 257Mb and contained 1300 zip files each was 197K and contained one file and most were named after movies. The 2nd folder was very similar, but contained installer files.
Of course i deleted the lot immediately without unzipping or clicking anything.
I ran NAV,Spybot and Adaware.
Adaware found worm win32.p2p-Worm.Alcan.a
I deleted/quarantined it but everything was still the same.
I copied task manager onto desktop, so i could open it.
As it transpires, the offending process was masquerading behind the name svchost.exe (alongside 6 other genuine ones)
I ran msconfig and selected diagnostic startup and low and behold, the offending process showed itself in task manger (whilst in diagnostic startup)
The offending article was a install file called svchost.exe and was located in:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
I deleted the item and restarted my pc.
Problem fixed, no restarting limewire
I even opened limewire from the start button and closed it again to make sure, but its all good
I hope this helps somebody spending hours and hours like i have done today

TD.
Reply With Quote
  #88 (permalink)  
Old March 1st, 2006
Novicius
 
Join Date: March 1st, 2006
Posts: 2
Samrulez91 is flying high
Default

I to found my virus to be svchost.exe. This file is in fact in the startup registry and the way I solved it was to delete all the proccesses of that name (I had a lot) using task manager (copy to desktop if you can't open it normally). Then a message came up saying about an error and the system will shut down in 30 seconds (or something like that). Just ignore it and make sure all the processes are gone. Then goto the actual program under start > all programs > startup or c:/> documents and settings > all users > start menu > startup. Try to do this before the computer shuts down (I found the start method quicker).

I hope this helps . It helped me sort out that problem.
Reply With Quote
  #89 (permalink)  
Old March 1st, 2006
Grandpa's Avatar
Valued Member contributor
 
Join Date: February 20th, 2005
Location: Depends on the Day
Posts: 3,012
Grandpa will become famous soon enough
Default

Samrulez91

If you deleted all of the processes named svchost.exe you had better get you copy of windows out and reinstall. I think the proper terminology is you ended the process. If you deleted all of the svchost.exe windows will not operate properly if at all. And telling people to delete all processes named svchost.exe is wrong all it wll do is mess up their system. svchost.exe is a critical part of the windows operating system. The link below will explain what it is.

http://www.justtext.com/processes-ta...chost-exe.html

Now on the other hand scvhost.exe is a virus that masquerades as svchost.exe and should be removed. Your post above was probably a mistake or a tipe-o but you should edit it and correct it so people don't mess up their computers and TURBODIESEL should edit his post also. The link below tells you what scvhost.exe is.

http://www.justtext.com/processes-ta...vhost-exe.html
__________________

java.com - Hot Games, Cool Apps









A little common sense goes a long way

Later Grandpa
Reply With Quote
  #90 (permalink)  
Old March 4th, 2006
Novicius
 
Join Date: March 4th, 2006
Posts: 2
micko_2 is flying high
Default

well this might help, on my computer it was under maplom.exe
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Limewire is Acting funny???Messing up Windows! SRT4pssh General Windows Support 6 October 17th, 2007 01:17 PM
Limewire acting odd. Possible virus?? wjhsMandy General Windows Support 4 June 23rd, 2006 12:06 PM
Limewire acting weird..help sidhaanth Windows 2 November 8th, 2005 08:24 AM
LimeWire acting up...again DJ609 General Windows Support 0 April 27th, 2005 01:56 PM


All times are GMT -7. The time now is 04:43 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.