Why in the heck (keeping it G) did LimeWire give me a Trojan Horse? I wonder if the LimeWire people have ever heard of dlder.exe or a fake explorer.exe located in C:\winodws\explorer\explorer.exe. How stupid can they be to release a program with a Trojan! I almost reinstalled Windows over this! For those of you using 2.0.2 I would highly recommend you virus scan your computer with and updated scanner and uninstall 2.0.2. As far as I know previous versions do not contain this Trojan. I really hope I get an answer from someone at LimeWire.

I was wondering where those came from I am useing norton anti-virus and it can't delete the explorer file or the dlder file any idea how to get rid of them?

The first thing you have to do iis uninstall limewire and delete its folder. Then run norton and look at where the infected files are stored. Then manually delete them

thanx that worked no more lime for me thank you very much.

Gnucleus all the way!

dlder is a trojan that allow a cracker to gain access to your system.

There is a lengthy discussion about it in the Bearshare Beta forums, since this trojan sliped in.


http://bearshare.net/forum/showthrea...&threadid=8252

FROM WHAT I GAN GATHER DOING THIS WILL COMPLETELY REMOVE THE TROJAN

THERE IS ABSOLUTELY NO GUARANTEE THAT THIS WILL WORK OR THAT IT WON’T DAMEAGE YOU SYSTEM

DO THIS AT YOUR OWN RISK AND BE SHURE TO FOLLOW MY INSTRUCTIONS VERY CAREFULLY
---------------------------

IF YOU HAVE

- Bearshare 2.4.0 Beta 7
- LimeWire 2.02
- Kazaa (unspecified versions)
- Grokster 1.33
- Net2Phone (unspecified versions)

UNINSTALL THEM AND DELETE THE INSTALLATION FILE AND THEIR FOLDER ON YOUR HARD DRIVE

---------------------------

OPEN ANY FOLDER AND GOTO "TOOLS > FOLDER OPTIONS > VIEW" AND CHECK “SHOW HIDDEN FILES AND FOLDERS”

---------------------------

DELETE (IF ANY OF THE FILES ARE INACCESABLE YOU WILL HAVE TO DELETE THEM IN MS-DOS MODE)

(FOLDER) C:\PROGRAM FILES\CLICKTILLUWIN
C:\WINDOWS\START MENU\PROGRAMS\CLICKTILLUWIN\CLICKTILLUWIN.LNK
C:\WINDOWS\DESKTOP\CLICKTILLUWIN.LNK
C:\WINDOWS\DLDER.EXE
(FOLDER NOT EXECUTABLE) C:\WINDOWS\EXPLORER\

---------------------------

GO TO “START > RUN”

TYPE "REGEDIT" WITHOUT QUOTES

PRESS [ENTER]

GOTO
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS \CURRENT VERSION \RUN

DELETE THE KEY
DLDER = "%WINDOWS%\EXPLORER\EXPLORER.EXE"

See http://www.gnutellaforums.com/showth...1&pagenumber=2