Thanks for the reply Lord, good observation, but I wonder, 0 in uploads stop them from taking yours, but does 0 in downloads, won't that stop your downloading? I'll have to try...

Yes ... I was being sarcast.. lol Sorry!

But the share option at the bottom of that window in options is new.

Thanks skyviper. I was doing it late at night and I guess I didn't read the whole thing through zzzzz... Deleted those files you listed and everything back to normal. One thing worries me though is how it got through. When the original file d/led and I got the alarm from my Symantec a/v, I did all the right things but it still got through. The only thing I can think of is afterwards, I noticed I didn't have the 'scan in compressed files' box checked in the a/v software. Maybe that was it.

A couple of observations that might be of use to someone are that:
1) Although I uninstalled limewire using Start>All Programs>limewire>uninstall, which ended with a 'successfully uninstalled' dialog, most if not all of the original files were still there (though lw didn't show up in Control Panel>Add/Remove Progs). Manually deleting the l/w directory produced a regular error dialog in place of re-running lw, meaning lw was finally off the system.
2)When I'd cleaned everything up and all seemed ok, I ran the security check on the Symantec site and all ports came up as stealthed, which suggests the back door is now closed.
3) winupdates was not part of the payload, so I suspect outlook.exe was the equivalent file in this instance.
4) It showed up on my system as Alcra C.
Thanks for the advice folks, I'll keep this one tagged in case I can do the same. Good hunting

Late addition: Just ran spydoctor and picked up the following reg entry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent Version\run outlook=C:\Program Files\outlook\putlook.exe /auto

i have the tskmgr.exe copied to my desktop but when i double click on it, it asks me what programme i wish to open it with and i havent got a clue! can anyone help?
Thanks

@angelica
Are you sure 1) that you copied the file from windows\system32 and 2) that you copied the file to you desktop and didn't just creat a shortcut to the file?

Read careful folks...save yourself some work.
If you delete the list of com files I posted above, then there is no need to copy the executables.

Tom

Okay, I've read though the pages and I don't think anyone has had the same problem as me.

I followed through the steps and I don't think I have a virus. The CPU Usage is fine, there's no files being used more than the System Idle Process, and there are no files containing winudates, regedit or any of the others, but I did uninstall LimeWire. So...what do I do next. All the other steps are if you Ended the process of the virus file. You can contact me at Fryman058@aol.com. I don't get on here much I will check to see if myquestion has been answered as much as possible. Thank you.

I have this problem with Limewire starting all the time and not been able to get in to windows task manager. However i cant find any of the files such as winudates when i copy and pate the task manager to the destop.

What could i do to get rid of this now?

Can anyone help?

Thanks

hi i have to same problem but there is one that i have that the tutorial does not cover.....

when i have pasted taskmgr.exe to desktop and run it...

i have no tabs at the top so i cant click 'performance' > cant click on the 'CPU column header' > cannot find out which or what is the process that is using 100% of my CPU and pooing up my system...


HELP!!!!!!!!!

Man alrite i tried the first steps posted here didnt work for me
reason being is i don have a winupdate anywhere
and i dont have any other file that runs close to even 20%
so i have no 'suspects' usually wen i click task manager
i have system idle running high on its 90's and iTunes or firefox
competing for 02%... and nothing else...

I got the same symptoms but not the right cure...
any help?