Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #91 (permalink)  
Old March 4th, 2006
Novicius
 
Join Date: March 4th, 2006
Posts: 2
micko_2 is flying high
Default

ow and one more thing ppl check in this directory C:\Documents and Settings\"what ever your account name is" see if there is a file called "Complete" on my computer it was hidden you might have to change your folder settings so you can see it, but eny way the virus made the file and it is aprox 1 gig it is filled with nealy 10,000 little files all with the virus in them the only virus program that picked it up for me was AVG
Reply With Quote
  #92 (permalink)  
Old March 5th, 2006
Novicius
 
Join Date: February 24th, 2006
Location: Stover Missouri near lake of the ozarks
Posts: 2
cc65078 is flying high
Default

Hi. I had same problem, was running avast av. tried everything, went and bought nortons and it found 6300+ all in file called complete. had to show hidden folders to find it, good luck all with this nasty little bugger. Charla
Reply With Quote
  #93 (permalink)  
Old March 14th, 2006
Novicius
 
Join Date: March 13th, 2006
Posts: 2
nikeasian06 is flying high
Default

I've tried the same thing but I didn't find anything in the Windows Task Manager that was running anywhere near 100% except for the one thing that was supposed to be running that high. If there is a solution for my problem, I really could use it. LimeWire is a great program but it is really starting to **** me off.
Reply With Quote
  #94 (permalink)  
Old March 14th, 2006
Novicius
 
Join Date: March 14th, 2006
Posts: 2
xaero*nz is flying high
Default

Quote:
Originally posted by BobbyNaini
I had this exact same problem, and after literally 24 hours of analyzing every inch of my computer, I solved the problem. I suspect that based on your descriptions of the problem (which I had as well), you are infected with a virus. It's unbelievable that none of my AntiVirus packages picked up this infection.

For me, everytime I restarted my computer, Limewire would automatically load up. Even if I closed it, it would just open back up again. On top of this, I could not even access the Task Manager in Windows XP to allow me to force a shutdown of Limewire. I hit CTRL-ALT-DEL and nothing would happen.

Anyways, here are the steps that need to be taken.

1) Uninstall Limewire. You can reinstall it at the end of these steps.

2) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

4) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

5) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

6) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

7) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

8) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

9) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

10) Finally, click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

11) Now restart your computer. Reinstall Limewire.

This should hopefully fix your problem.

Bobby Naini
you sir, are awesome. thanks
Reply With Quote
  #95 (permalink)  
Old March 17th, 2006
Novicius
 
Join Date: March 17th, 2006
Posts: 1
Lionbush is flying high
Default

Ok this seems a tricky little begger to get rid of. Why? Because it comes under many differnt guises.

Mine was called wmplayer and looked like a windows media file. However when i clicked it it wouldnt play which made me realise what it was.

So follow TURBODIESEL's instructions on the previous page but instead of the scvhost look for wmplayer. Dont worry it isn't your actual WMplayer.

Or simply....

Go have a look in the regestry under HKEY LOCAL MACHINE - SOFTWARE - MICROSOFT - WINDOWS - CURRENT VERSION - RUN

Then to the right you will see wmplayer. Look across under the DATA column it will read p2pnetworking. Delete this little blighter.

Go to task manager and under PROCESSES look for a process named wmplayer. End the process.

Next go to My Comp - C: - Docs and Settings - All users - Start Menu - Programs - Start

Look for the wmplayer and delete. Its a fake program, and no the real Media player.

This should solve the problem.

If none of this makes sense then sorry but it took me 6 hours to solve this and it is now 2am.

Last edited by Lionbush; March 17th, 2006 at 06:51 PM.
Reply With Quote
  #96 (permalink)  
Old April 3rd, 2006
Novicius
 
Join Date: April 3rd, 2006
Posts: 2
fictionallie is flying high
Default

This didn't work for me (this time...although it worked once before.)

I had no winupdates.exe file (or any other file using a lot of CPU).
Also: I can't even open my regedit (even using the method listed here), I get a message telling me that another program is using the regeditor.

Is there anything new I can do to sort this out? I don't want to lose LimeWire totally...
Reply With Quote
  #97 (permalink)  
Old April 3rd, 2006
Grandpa's Avatar
Valued Member contributor
 
Join Date: February 20th, 2005
Location: Depends on the Day
Posts: 3,012
Grandpa will become famous soon enough
Default

Go to Norbies World he will be able to help you.

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html
__________________

java.com - Hot Games, Cool Apps









A little common sense goes a long way

Later Grandpa
Reply With Quote
  #98 (permalink)  
Old April 6th, 2006
Novicius
 
Join Date: April 5th, 2006
Posts: 1
dointhebiz is flying high
Default

Tried everything that was suggested with no luck.....many thanx to Grandpa who advised Norbies world at http://www.norbiesworld.co.uk/Forums...ic/t=1295.html downloaded ewido antimalware and hey! presto! did the job no more limewire pop up every 15 secs and got my task manager running again.
No fewer than 902 files had to be deleted they were in the startup disguised as a svchost.exe file infection was called Dropper.VB.lu
Hope this helps anyone with this cursed worm
Reply With Quote
  #99 (permalink)  
Old April 9th, 2006
the.network's Avatar
King For A Day
 
Join Date: April 9th, 2006
Location: Canada
Posts: 3
the.network is flying high
Default

I uninstalled limewire, but this java window says "could not find limewire component" and it won't leave me alone, so I uninstalled java and now I'm getting a window that says "limewire could not find java" and that won't leave me alone either!!!!
Reply With Quote
  #100 (permalink)  
Old April 13th, 2006
Novicius
 
Join Date: April 13th, 2006
Posts: 1
MediaMisfit is flying high
Default

I appreciate your efforts. Was able to fix everything in 10 minutes. Haven't got that dirty in windows in a while but I really appreciate it.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Limewire is Acting funny???Messing up Windows! SRT4pssh General Windows Support 6 October 17th, 2007 01:17 PM
Limewire acting odd. Possible virus?? wjhsMandy General Windows Support 4 June 23rd, 2006 12:06 PM
Limewire acting weird..help sidhaanth Windows 2 November 8th, 2005 08:24 AM
LimeWire acting up...again DJ609 General Windows Support 0 April 27th, 2005 01:56 PM


All times are GMT -7. The time now is 02:33 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.