|
| |||||||
| Register | FAQ | The Twelve Commandments | Members List | Calendar | Arcade | Find the Best VPN | Today's Posts | Search |
| General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions |
| Welcome To Gnutella Forums You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content, fun aspects such as the image caption contest and play in the arcade, and access many other special features after your registration and email confirmation. Registration is fast, simple and absolutely free so please, join our community today! (click here) (Note: we use Yandex mail server so make sure yandex is not on your email filter or blocklist.) Confirmation emails might be found in your Junk folder, especially for Yahoo or GMail. If you have any problems with the Gnutella Forum registration process or your Gnutella Forum account login, please contact us (this is not for program use questions.) Your email address must be legitimate and verified before becoming a full member of the forums. Please be sure to disable any spam filters you may have for our website, so that email messages can reach you. Note: Any other issue with registration, etc., send a Personal Message (PM) to one of the active Administrators: Lord of the Rings or Birdy. Once registered but before posting, members MUST READ the FORUM RULES (click here) and members should include System details - help us to help you (click on blue link) in their posts if their problem relates to using the program. Whilst forum helpers are happy to help where they can, without these system details your post might be ignored. And wise to read How to create a New Thread Thank you If you are a Spammer click here. This is not a business advertising forum, all member profiles with business advertising will be banned, all their posts removed. Spamming is illegal in many countries of the world. Guests and search engines cannot view member profiles. Deutsch? Español? Français? Nederlands? Hilfe in Deutsch, Ayuda en español, Aide en français et LimeWire en français, Hulp in het Nederlands Forum Rules Support Forums Before you post to one of the specific Client Help and Support Conferences in Gnutella Client Forums please look through other threads and Stickies that may answer your questions. Most problems are not new. The Search function is most useful. Also the red Stickies have answers to the most commonly asked questions. (over 90 percent). If your problem is not resolved by a search of the forums, please take the next step and post in the appropriate forum. There are many members who will be glad to help. If you are new to the world of file sharing please do not be shy! Everyone was ‘new’ when they first started. When posting, please include details for: Your Operating System ....... Your version of your Gnutella Client (* this is important for helping solve problems) ....... Your Internet connection (56K, Cable, DSL) ....... The exact error message, if one pops up Any other relevant information that you think may help ....... Try to make your post descriptive, specific, and clear so members can quickly and efficiently help you. To aid helpers in solving download/upload problems, LimeWire and Frostwire users must specify whether they are downloading a torrent file or a file from the Gnutella network. Members need to supply these details >>> System details - help us to help you (click on blue link) Moderators There are senior members on the forums who serve as Moderators. These volunteers keep the board organized and moving. Moderators are authorized to: (in order of increasing severity) Move posts to the correct forums. Many times, members post in the wrong forum. These off-topic posts may impede the normal operation of the forum. Edit posts. Moderators will edit posts that are offensive or break any of the House Rules. Delete posts. Posts that cannot be edited to comply with the House Rules will be deleted. Restrict members. This is one of the last punishments before a member is banned. Restrictions may include placing all new posts in a moderation queue or temporarily banning the offender. Ban members. The most severe punishment. Three or more moderators or administrators must agree to the ban for this action to occur. Banning is reserved for very severe offenses and members who, after many warnings, fail to comply with the House Rules. Banning is permanent. Bans cannot be removed by the moderators and probably won't be removed by the administration. The Rules 1. Warez, copyright violation, or any other illegal activity may NOT be linked or expressed in any form. Topics discussing techniques for violating these laws and messages containing locations of web sites or other servers hosting illegal content will be silently removed. Multiple offenses will result in consequences. File names are not required to discuss your issues. If filenames are copyright then do not belong on these forums & will be edited out or post removed. Picture sample attachments in posts must not include copyright infringement. 2. Spamming and excessive advertising will not be tolerated. Commercial advertising is not allowed in any form, including using in signatures. 3. There will be no excessive use of profanity in any forum. 4. There will be no racial, ethnic, or gender based insults, or any other personal attacks. 5. Pictures may be attached to posts and signatures if they are not sexually explicit or offensive. Picture sample attachments in posts must not include copyright infringement. 6. Remember to post in the correct forum. Take your time to look at other threads and see where your post will go. If your post is placed in the wrong forum it will be moved by a moderator. There are specific Gnutella Client sections for LimeWire, Phex, FrostWire, BearShare, Gnucleus, Morpheus, and many more. Please choose the correct section for your problem. 7. If you see a post in the wrong forum or in violation of the House Rules, please contact a moderator via Private Message or the "Report this post to a moderator" link at the bottom of every post. Please do not respond directly to the member - a moderator will do what is required. 8. Any impersonation of a forum member in any mode of communication is strictly prohibited and will result in banning. 9. Multiple copies of the same post will not be tolerated. Post your question, comment, or complaint only once. There is no need to express yourself more than once. Duplicate posts will be deleted with little or no warning. Keep in mind a forum censor may temporarily automatically hold up your post, if you do not see your post, do not post again, it will be dealt with by a moderator within a reasonable time. Authors of multiple copies of same post may be dealt with by moderators within their discrete judgment at the time which may result in warning or infraction points, depending on severity as adjudged by the moderators online. 10. Posts should have descriptive topics. Vague titles such as "Help!", "Why?", and the like may not get enough attention to the contents. 11. Do not divulge anyone's personal information in the forum, not even your own. This includes e-mail addresses, IP addresses, age, house address, and any other distinguishing information. Don´t use eMail addresses in your nick. Reiterating, do not post your email address in posts. This is for your own protection. 12. Signatures may be used as long as they are not offensive or sexually explicit or used for commercial advertising. Commercial weblinks cannot be used under any circumstances and will result in an immediate ban. 13. Dual accounts are not allowed. Cannot explain this more simply. Attempts to set up dual accounts will most likely result in a banning of all forum accounts. 14. Video links may only be posted after you have a tally of two forum posts. Video link posting with less than a 2 post tally are considered as spam. Video link posting with less than a 2 post tally are considered as spam. 15. Failure to show that you have read the forum rules may result in forum rules breach infraction points or warnings awarded against you which may later total up to an automatic temporary or permanent ban. Supplying system details is a prerequisite in most cases, particularly with connection or installation issues. Violation of any of these rules will bring consequences, determined on a case-by-case basis. Thank You! Thanks for taking the time to read these forum guidelines. We hope your visit is helpful and mutually beneficial to the entire community. |
 |
| | LinkBack | Thread Tools | Display Modes |
February 16th, 2007
| ||||
| ||||
 Good info Mick... 
__________________ If you dont live for something... You die for nothing...  |
|
February 17th, 2007
| ||||
| ||||
| Hi Everyone Yes This is an old worm, But looking at its behavour there were similaraties So my thinking was It could have been modified. Hey Birdy, 4 hours of searching & this is the only thing so far that I found that was even remotly similar. After going through the list of file names that had been posted I realised that we have most of them present, Here on the network. Im not a teki so if anyone can sujest other places to look, I will do some donky work sniffin around. why dont L/W just limmit the file extentions you can share in tools/options/sharing,Extensions. If the defult setting (beginers) ticked auto at setup only had audio,vidio,pic,doc. then an advanced tab for, fools & experts, we would not have half the crap in search. Because the newbies could not auto share exe rar zip an other crap. If I gave a small child a motor bike n said ride it, without checking how n if they could you would call me recless, well I beileve P2P also needs stablizers for most of the new guys at the first. P.S.. sorry off topic.....But is'nt that easly possable. Peace.
__________________ mickjapa108 Last edited by mickjapa108; February 17th, 2007 at 05:56 AM. |
|
February 17th, 2007
| ||||
| ||||
| Have a look here, at posts #8 & #9 http://www.gnutellaforums.com/showth...754#post255754 When you do a search for xzxzxzxzxzxz.exe.... http://www.bitdefender.com/VIRUS-100...B.Ymeak.A.html http://www.bleepingcomputer.com/forums/topic45260.html http://forums.techguy.org/windows-nt...indows-xp.html (check out post #4 of the above...they're telling people to use BFU, same as is used for the LW always popping up worm) http://forums.spywareinfo.com/lofive...hp/t72978.html (also mentions BFU) When you do a search for q7q7q7q7q7q7q7q7xx.zip http://forums.spywareinfo.com/index.php?showtopic=93859 I know nothing about cleaning up this sort of thing...I don't see how running BFU could hurt but I don't know if it's going to fix the whole thing either. KillBox is mentioned a couple of times also, but I've never heard of that one. We could get people to run BFU & if that doesn't fix the prob, then send them on to one of the help sites? Or one of the gurus might have some more info & suggestions? Atm, people are just refusing to believe they're infected at all...if their AV doesn't pick anything up then they're convinced things are ok. What do you guys think?  Last edited by birdy; February 17th, 2007 at 06:25 PM. |
|
February 17th, 2007
| ||||
| ||||
| Good info Birdy!  The people in those spyware forums really seem to know their stuff! At least now everyone that is having this problem has somewhere to go...in the thread that I was most impressed by (the last one), the expert had the person download 5 or 6 programs to eliminate all of the malware! This just goes to show how evasive some of these nasty files can be. No program is guaranteed to get rid of all malware. It can be quite a battle, and that's why we try our best to avoid it in the first place! Of course, a few people must take one for the team, so to speak, whenever something new like this pops up. Good luck to everyone that is suffering through this. Dano |
|
February 18th, 2007
| ||||
| ||||
| Hi every one This is expansion of 2nd Link that Birdy Gave, Users can check if they have any of these files n folders present on there computer By copying the names EXACTLY to Notepad, then Boot in safe mode. Note: In file options, you must enable SHOW hidden files. Before Boot in safe mode Then Go, Start/Search n enter exact file names. If found please make short posts in this thread ONLY, No life history  just list of file names & anythingrelated directly. We appreciate you help, Thank you. Win32.Worm.VB.Ymeak.A Spreading: MEDIUM Damage: MEDIUM Size: 236,136 Discovered: 2006 Mar 02 SYMPTOMS: Presence of the following files: %windir%\b.exe (usually C:\Windows\b.exe), 155,648 bytes C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe, 236,136 bytes The file xzxzxzxzxzxz.exe (236,136 bytes) may appear in a subdirectory called "_" (underscore) in the shared folders of peer-to-peer file sharing applications. TECHNICAL DESCRIPTION: This is a worm that spreads itself via peer-to-peer file sharing networks, dropping a backdoor identified by BitDefender as Backdoor.RBot.CMQ. It has a file size of 236,136 bytes. The first time it is run, it displays the following message to make the user believe it is a setup file downloaded with errors: After displaying the message, it copies itself to the All Users' startup folder (usually C:\Documents and Settings\All Users\Start Menu\Programs\Startup\) as svchost.exe, and launches itself from that new location. The original instance ends its execution at this point. When launched from the afore mentioned (Startup) folder, it checks if the %system% (usually C:\Windows\System32) folder contains any of the following files: winlog.exe, p2pnetworking.exe, scvhost.exe, winlogi.exe or p2pnetwork.exe. These are all file names used by the RBot trojan. If it can't find any of them, it assumes the RBot trojan is not present so it dropps it into the Windows folder as b.exe and runs it. To spread itself, it collects random application names from certain torrent and direct download sites. It then places itself in the shared folder of five common P2P file sharing software (listed below) using the previousely collected names, in a subfolder called "_" (underscore). At regular intervals it looks for the executable files of the file sharing programs Limewire, Shareaza, Bearshare, Morpheus and Morpheus Ultra and launches them. To protect itself from being discovered, it opens the following files (requesting exclusive access): cmd.exe, netstat.exe, tracert.exe, ping.exe, ipconfig.exe, taskkill.exe, regedt32.exe and taskmgr.exe from the %system% folder and regedit.exe from the %windir% folder. It keeps them open while it is active, so they can not be executed. Removal instructions: Please let BitDefender disinfect your files. ANALYZED BY: Vlad Ioan Topan, BitDefender Virus Researcher
__________________ mickjapa108 |
|
February 18th, 2007
| ||||
| ||||
| Excellent research Birdy...I'm Bookmarking this page...
__________________ If you dont live for something... You die for nothing... |
|
February 18th, 2007
| ||||
| ||||
| I asked about this over at the Beta forums the other day and Aaron has replied with this... http://www.limewire.org/forum/showpo...16&postcount=2
__________________ If you dont live for something... You die for nothing... |
|
February 26th, 2007
| |||
| |||
| HELP I have had the same thing happen to me, very scary as i have lost a huge amount of files can anyone help ? all the .mp3 files have been converted into .zip files and if you try opening or playin them they are just setup files, anyway to save these files ? really need to, and 'quotejnr' did u find out how to do this? |
|
February 28th, 2007
| |||
| |||
| Hi, its a worm called delf.atb . here is a link to free virus software that can find and remove it. http://free.grisoft.com/doc/5390/lng/us/tpl/v5 |
|
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| download avi cannot be converted | Lowey | Open Discussion topics | 2 | February 13th, 2006 04:04 AM |
| converted wma files show up in limewire not i tunes | jillw | General Mac OSX Support | 1 | January 5th, 2006 02:01 PM |
| Adding Files/ Folder from LimeWire Pro to iTunes without duplicating files. HELP!! | rgagama | Tips & Tricks | 0 | January 26th, 2005 07:37 AM |
| all downloaded files are limewire type files, unplayable | Luna_Tick | Download/Upload Problems | 1 | February 19th, 2004 11:51 PM |
| mp3s need to be converted now before i burn | NeetFreek | General Mac Support | 6 | August 5th, 2003 12:15 PM |
Linear Mode
