I FOLLOWED ALL THE INSTRUCTIONS BUT.....

i still get those 6 or 7 same old popups all the time.. they even try to pop up when the net is disconnected.. any suggestions?

Ok ok ok.
I havent got rid of the virus yet!!!!
My problem is that i cant find a file with winupdates in it in the prefetch folder.
And also too when i got to end the system idle process in task manager, it will not let me!!!
HELP ME!!!

IF anyone wants a sample of it, i know a file that containes the virus.
In limewire, search for the 'program' 'snes emulator'!!!
It is 852kb, same as the virus, it is zipped and it is exe.
this contains the virus!!
If you try browsing the host it wont let you so it does not give a IP address.

PLEASE HELP ME!!!

I think I may have found another file name for the infected firus file.
In the instrunctions it says delete anything with winupdates in it.
I have a file called aupdate.exe that was created the same day as i obtained the virus. Could this be the file?

mune was winupdater.. not winupdates

Hey i found out another way to find this virus.
Use avast to scan your computer. Then it has a list of files that could not be scanned, then i got Norton to scan my computer, and it scanned these files avast wouldnt, and those files had virii.

I have the same problem as everyone else but when i go to task manager the only thing thats over 90% is SYSTEM PLEASE HELP!

This totally ROCK!!!!

I have to register to this forum only for replying this topic, I really have to say thanks for letting me know this is actually a virus and helped me remove it.

it was driving me crazy.... performance drop by an insane amount and no Task manager....

God Bless whoever wrote the solution to this problem

I started following the Help steps that "kc0rkx_finch" has posted but have a few problems with this.

1. Can't find any files with "Winupdates" in the name

2. Don't have any process except System Idle Process running at almost 100%

BUT i still can't use Ctrl+Alt+Del i.e Task Manager

Any ideas?

OS - Win XP

(OS WinXP Pro)

Ok, so i had to sit and watch LimeWire popping up while i didn't want it to. Very annoying. So read it had to be a virus. The following was what i did to get rid of it:

1. Make sure that every folder displays everything that is actually IN the folder. (See the first thread in the forum from kc0rkx_finch. http://www.gnutellaforums.com/showth...hlight=WORM%2A )

2. Run a scan with TrendMicro. It's free and it's good. I only
scanned the following maps of which i suspected could hold the virus: c:\windows, c:\documents and settings and c:\program files. It is much faster than scanning your entire PC. Though i recommend to do it after all done.

3. Copy taskmgr etc etc to the desktop (see the first thread)

4. Remove LimeWire with in the software configuration.

5. Search your PC for everything with LimeWire in it and keep that window opened (see 6). There still will be files with limewire in it even while it has been removed.

6. Start taskmgr from your desktop (NOT via Start)

7. Kill LimeWire and delete all files containing the name LimeWire.

8. Kill the infected files found by TrendMicro (if running)

9. Relocate the infected files to your desktop. (Mine was MsUpdate.exe and a few alike). You can also delete them i guess but i read something about donating them to norton for helping them out...

10. Reboot.

After everything above has been done you should be 'virusfree' and LimeWire will no longer be popping up. I must say this is how i got rid of it and i hope i didn't leave anything out. Don't forget to run another scan with TrendMicro.

Hope this will be of some help.

greetz,

EZ DC

edit: I forgot to mention to reinstall LimeWire


Edit: Ssquiffy, my system resources were also available for more than 98%. Doesn't say you don't have the virus!

10) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

11) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.



You know, I followed directions to a T, now my System32 is MISSING and WHERE the hell is C:windows\regdit.exe? Huh?

Real nice program. Slows everything up, takes DAYS to download and some ******* attaches a WORM to it!

NO THANKS