Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #161 (permalink)  
Old December 20th, 2006
Novicius
 
Join Date: December 20th, 2006
Posts: 3
LWactingWIERD is flying high
Default hi.!

Quote:
Originally Posted by
I had this exact same problem, and after literally 24 hours of analyzing every inch of my computer, I solved the problem. I suspect that based on your descriptions of the problem (which I had as well), you are infected with a virus. It's unbelievable that none of my AntiVirus packages picked up this infection.

For me, everytime I restarted my computer, Limewire would automatically load up. Even if I closed it, it would just open back up again. On top of this, I could not even access the Task Manager in Windows XP to allow me to force a shutdown of Limewire. I hit CTRL-ALT-DEL and nothing would happen.

Anyways, here are the steps that need to be taken.

1) Uninstall Limewire. You can reinstall it at the end of these steps.

2) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

4) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

5) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

6) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

7) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

8) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

9) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

10) Finally, click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

11) Now restart your computer. Reinstall Limewire.

This should hopefully fix your problem.

Bobby Naini
Thanks 4 d big heLp.! even though i haven't tried it yet. i was wondering, wiLL the procedure deLete aLL of our pc's fiLes.? pLs repLy ASAP.! thanks.!
Reply With Quote
  #162 (permalink)  
Old December 20th, 2006
Novicius
 
Join Date: December 20th, 2006
Posts: 3
LWactingWIERD is flying high
Default

wiLL the process erase aLL of my fiLes.?
Reply With Quote
  #163 (permalink)  
Old December 20th, 2006
Sleepless's Avatar
ReTired
 
Join Date: January 1st, 2006
Location: Unknown
Posts: 3,121
Sleepless is just really nice
Default

Try this fix first:

The limewire keeps popping up fix

If it doesn't help then go through those steps, or if you're not comfortable doing that, then post on Norbies or one of the other help sites (step 5 here):

http://www.gnutellaforums.com/showthread.php?t=41432
Reply With Quote
  #164 (permalink)  
Old December 25th, 2006
Novicius
 
Join Date: December 25th, 2006
Location: sydney australia
Posts: 1
lovher is flying high
Default

Quote:
Originally Posted by davidberkbuegler
> First remove Limewire(Start>All Programs>Limewire>Uninstall)
> Download "Brute force Uninstaller" to Desktop
>To download http://www.merijn.org/files/bfu.zip
>Right click the "BFU folder" on your desktop, and choose "Extract All"
>Click "next"
>In the box to choose where to extract the files to,
>Click "Browse"
>Click on the + sign next to "My Computer"
>Click on "Local Disk (C: ) "
>Click "Make New Folder"
>Type in BFU
>Click "Next", and Uncheck the "Show Extracted Files" box and then click "Finish".

Then,
>Download Alcra PLUS Remover at this link
>Right click link underneith and select "save target as" Save it in the same folder you made earlier "(c:\BFU)".
http://metallica.geekstogo.com/alcanshorty.bfu

>Reboot to "safe mode"
>Go to "My Computer>C:/BFU folder".
>go to "BFU.exe"
>Select "folder icon"(top right)
>click "alcanchorty.bfu"
>Press "Execute" and let the program do it’s job. (You ought to see a progress bar if you did this correctly.)
>Wait for the complete script execution box to pop up and press "OK".
>Press "exit" to terminate the BFU program.
>Reboot into normal windows.

IT'S GONE

It is not absolutely necessary to uninstall Limewire or go into safe mode.It just makes it easier to do with Limewire not popping up all the time

hey everyone, anyone?! firstly, hope yall had a good xmas. anyways,
i did everything and i tried to execute the alcanshorty file but it doesnt open up? what program do i have to use for it to work?

THANKS IN ADV.
Reply With Quote
  #165 (permalink)  
Old December 25th, 2006
Sleepless's Avatar
ReTired
 
Join Date: January 1st, 2006
Location: Unknown
Posts: 3,121
Sleepless is just really nice
Default

the brute force uninstaller. It should happen automatically though if you did all the steps correctly.

If you did do all the steps correctly, then maybe this is not this exact virus you have??

Don't really know since I have never tried this myself
Reply With Quote
  #166 (permalink)  
Old December 26th, 2006
Novicius
 
Join Date: December 26th, 2006
Posts: 2
Louiedee is flying high
Default limewire opening up

I cant find the file winupdates in the task manager.

I deleted the file limewire from the task manager and i deleted it from the registry, it does not open anymore, i also deleted it from my computer, all files, i still cant get task manager when i hit ctrl,alt,del.

i have it on the desktop, if i want to open it, but how do i get it to work from the keyboard?


isnt this like rewriting microsoft windows?


who did this, the music industry?
Reply With Quote
  #167 (permalink)  
Old December 26th, 2006
Sleepless's Avatar
ReTired
 
Join Date: January 1st, 2006
Location: Unknown
Posts: 3,121
Sleepless is just really nice
Default

Did you try the easy fix:

http://www.gnutellaforums.com/showth...269#post231269
Reply With Quote
  #168 (permalink)  
Old December 29th, 2006
Novicius
 
Join Date: December 29th, 2006
Posts: 4
papa_smurf is flying high
Default

hy i have the same problems wiht limewire, it always runs on its own and when i have deleted it an error massage appeared.
same syptoms: strg+alt+del doesnt work, can't open regedit and so on

i have searched my prefetch folder but there is no winupdate.exe file or something like that.
i also have searched the registry like you have suggested but also no succcess!
when i open the the taskmanager an insatller is running, and i t shows 54 processes. when i close the installer limewire stops to pop up and two processes dissapear (msconfig.exe , wmiprvse).

so far so good but i can't fix the problem i cant find the bug to delete it!

there is a file named WMIPRVSE.EXE-28F301A9.pf in the prefetch but i dont dare to delete it!

i have tried with ad-aware, spybot s&d, windows defender, norton but nothing does work they cannot find a bug!

Since a few days norton shows a message after bootin my computer thaht it has found a bug called backdoor.trojan and that it has delete it but problem with limewire is still there and when i reboot my computer norton shows the backdoor.trojan-message again!

i really need your help!

ps. sorry for my bad english!
Reply With Quote
  #169 (permalink)  
Old December 29th, 2006
Lord of the Rings's Avatar
ContraBanned
 
Join Date: June 30th, 2004
Location: Middle of the ocean apparently (middle earth)
Posts: 663
Lord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputation
Default

Go to NorbiesWorld (click on link) & register & follow his directions carefully.

After solving the issues via Norbie. Reinstall LW. Chances are LW may have been corrupted. Also try deleting your LW Preferences folder whilst LW is closed; instructions here: Point #2 & 3 in Fixes for Limewire (sample image included at bottom of page) before reinstalling. But note any important settings because once you delete the LW prefs folder you'll need to reset all your options.
Reply With Quote
  #170 (permalink)  
Old January 3rd, 2007
Novicius
 
Join Date: December 29th, 2006
Posts: 4
papa_smurf is flying high
Default please help

Hey guys no response at norbies world! i still need your help!
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Limewire is Acting funny???Messing up Windows! SRT4pssh General Windows Support 6 October 17th, 2007 01:17 PM
Limewire acting odd. Possible virus?? wjhsMandy General Windows Support 4 June 23rd, 2006 12:06 PM
Limewire acting weird..help sidhaanth Windows 2 November 8th, 2005 08:24 AM
LimeWire acting up...again DJ609 General Windows Support 0 April 27th, 2005 01:56 PM


All times are GMT -7. The time now is 03:52 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.