LimeWire Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire (Cross-platform) > Technical Support > Download/Upload Problems
Register FAQ Members List Calendar Arcade Search Today's Posts Mark Forums Read

Download/Upload Problems Problems with downloading or uploading files through the Gnutella network.


Welcome To Gnutella Forums

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content, fun aspects such as the image caption contest and play in the arcade, and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! (click here)

If you have any problems with the registration process or your account login, please contact us. Your email address must be legitimate and verified before becoming a full member of the forums. Please be sure to disable any spam filters you may have for our website, so that email messages can reach you.

Once registered but before posting, members MUST READ the FORUM RULES (click here) and LimeWire/FrostWire users should include System details - help us to help you (click on blue link) in their posts if their problem relates to using the program. Whilst forum helpers are happy to help where they can, without these system details your post might be ignored. And wise to read How to create a New Thread

Thank you

. Uw e-mailadres moet wettig zijn en verifiërde alvorens een volwaardig lid van de forums te worden. Gelieve te zijn zeker om om het even welke spamfilters onbruikbaar te maken u voor onze website kunt hebben, zodat de e-mailberichten u kunnen bereiken
. Votre email address doit être légitime et vérifié avant d'aller bien à un membre à part entière des forum. Veuillez être sûr de désactiver tous les filtres de Spam que vous pouvez prendre pour notre site Web, de sorte que les messages électroniques puissent vous atteindre
. Ihr email address muss gesetzmäßig und überprüft sein, bevor es ein vollwertiges Mitglied der Foren wird. Seien Sie bitte sicher, alle mögliche Spamfilter zu sperren, die Sie für unsere Web site haben können, damit E-Mail-Nachrichten Sie erreichen können
. Su email address debe ser legítimo y verificado antes de sentir bien a un miembro de pleno derecho de los foros. Esté por favor seguro de inhabilitar cualquier filtro del Spam que usted pueda tener para nuestro Web site, de modo que los correos electrónicos puedan alcanzarle

. Seu email address deve ser legítimo e verific antes de assentar bem em um membro integral dos fóruns. Seja por favor certo incapacitar todos os filtros que do Spam você puder ter para nosso Web site, de modo que os mensagens de correio electrónico possam o alcangar.
. Din e-post tilltalar måste vara legitim och verifierat för passande en full medlem av forumen. Behaga är säkert att inaktivera någon spam filtrerar dig kan ha för vår website, så att e-postmeddelanden kan ne dig.
. Il vostro email address deve essere legittimo e verificato prima di stare bene ad un membro titolare delle tribune. Sia prego sicuro rendere invalidi tutti i filtri che dallo Spam potete avere per il nostro Web site, di modo che i messaggi di posta elettronica possono raggiungerli.
. Η διεύθυνση ηλεκτρονικού ταχυδρομείου σας πρέπει να είναι νόμιμη και ελεγγμένη πρίν γίνεται πλήρες μέλος των φόρουμ. Παρακαλώ να είστε βέβαιος να θέσει εκτός λειτουργίας οποιωνδήποτε φίλτρα spam που μπορείτε να έχετε για τον ιστοχώρο μας, έτσι ώστε τα μηνύματα ηλεκτρονικού ταχυδρομείου μπορούν να φθάσουν σε σας.
. Ваш адрес электронной почты должен быть правомерен и подтвержен перед идти действительным членом форумов. Пожалуйста уверен вывести все фильтры из строя спам вы можете иметь для нашего вебсайта, так, что сообщения по электронной почте смогут достигнуть вас.
. 您的电子邮件必须是合法和核实在适合论坛的一个正式成员之前。 请务必使您可以为我们的网站有的所有发送同样的消息到多个新闻组过滤器失去能力,因此电子邮件可能到达您
. あなたの電子メールアドレスはフォーラムのフールメンバーに似合う前に正当、確認されなければならない。 電子メールメッセージが達することができるようにあなたが私達のウェブサイトのために持つかもしれないスパムフィルターを不具にすること確実がありなさい。

Deutsch? Español? Français? Nederlands?
Hilfe in Deutsch, Ayuda en español, Aide en français, Hulp in het Nederlands

Forum Rules

Support Forums

Before you post to one of the specific Client Help and Support Conferences in Gnutella Client Forums please look through other threads and Stickies that may answer your questions. Most problems are not new. The Search function is most useful. Also the red Stickies have answers to the most commonly asked questions. (over 90 percent).
If your problem is not resolved by a search of the forums, please take the next step and post in the appropriate forum. There are many members who will be glad to help.
If you are new to the world of file sharing please do not be shy! Everyone was ‘new’ when they first started.

When posting, please include details for:
Your Operating System ....... Your version of your Gnutella Client ....... Your Internet connection (56K, Cable, DSL) ....... The exact error message, if one pops up
Any other relevant information that you think may help ....... Try to make your post descriptive, specific, and clear so members can quickly and efficiently help you
LimeWire and FrostWire users need to supply these details >>> System details - help us to help you (click on blue link)

Moderators

There are senior members on the forums who serve as Moderators. These volunteers keep the board organized and moving.
Moderators are authorized to: (in order of increasing severity)
Move posts to the correct forums. Many times, members post in the wrong forum. These off-topic posts may impede the normal operation of the forum.
Edit posts. Moderators will edit posts that are offensive or break any of the House Rules.
Delete posts. Posts that cannot be edited to comply with the House Rules will be deleted.
Restrict members. This is one of the last punishments before a member is banned. Restrictions may include placing all new posts in a moderation queue or temporarily banning the offender.
Ban members. The most severe punishment. Three or more moderators or administrators must agree to the ban for this action to occur. Banning is reserved for very severe offenses and members who, after many warnings, fail to comply with the House Rules. Banning is permanent. Bans cannot be removed by the moderators and probably won't be removed by the administration.


The Rules

1. Warez, copyright violation, or any other illegal activity may NOT be linked or expressed in any form. Topics discussing techniques for violating these laws and messages containing locations of web sites or other servers hosting illegal content will be silently removed. Multiple offenses will result in consequences.

2. Spamming and excessive advertising will not be tolerated.

3. There will be no excessive use of profanity in any forum.

4. There will be no racial, ethnic, or gender based insults, or any other personal attacks.

5. Pictures may be attached to posts and signatures if they are not sexually explicit or offensive.

6. Remember to post in the correct forum. Take your time to look at other threads and see where your post will go. If your post is placed in the wrong forum it will be moved by a moderator.

7. If you see a post in the wrong forum or in violation of the House Rules, please contact a moderator via Private Message or the "Report this post to a moderator" link at the bottom of every post. Please do not respond directly to the member - a moderator will do what is required.

8. Any impersonation of a forum member in any mode of communication is strictly prohibited and will result in banning.

9. Multiple copies of the same post will not be tolerated. Post your question, comment, or complaint only once. There is no need to express yourself more than once. Duplicate posts will be deleted with little or no warning.

10. Posts should have descriptive subjects. Vague titles such as "Help!", "Why?", and the like may not get enough attention to the contents.

11. Do not divulge anyone's personal information in the forum, not even your own. This includes e-mail addresses, IP addresses, age, house address, and any other distinguishing information. Don´t use eMail addresses in your nick.

12. Signatures may be used as long as they are not offensive or sexually explicit.

13. Failure to show that you have read the forum rules may result in forum rules breach infraction points or warnings awarded against you which may later total up to an automatic temporary or permanent ban. Supplying system details is a prerequisite in most cases, particularly with connection or installation issues.

Violation of any of these rules will bring consequences, determined on a case-by-case basis.


Thank You! Thanks for taking the time to read these forum guidelines. We hope your visit is helpful and mutually beneficial to the entire community.


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old May 21st, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Angry New Virus On Limewire

Hi Everybody.
Just to give you all a heads up there's a new virus on Limewire. :mad:
Trojan-Downloader.WMA.Wimad.n....It showed up April 7 2008.I picked it up yesterday.My ZoneAlarm zapped it. Lucky ya...Thing is,it looked like a normal MP3...BEWARE
Reply With Quote
  #2 (permalink)  
Old May 21st, 2008
ursula's Avatar
The ex-Cleaning Lady
 

Join Date: May 17th, 2002
Location: koyaanisqatsi
Posts: 2,353
ursula is on a distinguished road
Default

Thanks for the HU, but, PLEASE, remember... there are NO viruses on Limewire...

Limewire is simply one of numerous p2p 'clients' that work within the Gnutella Network...

The viruses that are out there are from US.

US meaning normal users.

Many 'normal users' do not know that they are sharing infected files.

This is because they are, first, victims of the idiocy and arrogance of the client developers and, further, because they are trying to run a marathon before they can even fantasize about crawling.

The above means that one should NEVER allow ANY sharing from the default DownLoads Folder...
NEVER allow 'Partial Filesharing'...
NEVER put any file into a Shared Folder until it has been checked for viruses, proper tagging and actually TESTED !
In simple words... If you do NOT know the quality of something, why should you share it with someone else ?
And, if one does share without first really checking the quality, than there is absolutely no grounds for complaint, right ???

Those who share sh¡t are THE PROBLEM.
Each and every one of us must use great discipline to be certain to NOT share sh¡t.
It's easy if you care.

Hey, BCOOL, the above isn't aimed AT you...
Just saw the soap-box you carried out here to the field and thought I climb on !!!

Ta !

p.s. As long as I am up here, on the box, could a request also be made to you fools that are sharing huge numbers of files to NEVER EVER be an Ultrapeer ?
You are wrecking the network with such stupidity. You're also limiting your own p2p activities !
Reply With Quote
  #3 (permalink)  
Old May 21st, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Default

OK...Lets all give a big hand to ursula

I'm sad to say I got hit with that Trojan again today.Like before it looked like a legitimate MP3.Am I the only one?
Reply With Quote
  #4 (permalink)  
Old May 21st, 2008
90hoursleep's Avatar
leecher / n00b / nug
 

Join Date: April 26th, 2008
Location: abc
Posts: 6
90hoursleep is on a distinguished road
Default

um il download something that looks like an mp3 , but it doesnt play music , and then il do a search for another mp3 and it says ive already downloaded it .... im guessing thats the virus ? ( im a n00b by the way )
Reply With Quote
  #5 (permalink)  
Old May 22nd, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Default

Howz It 90hoursleep,

I'm not sure what you downloaded.Here is a little information on Trojan.Downloader.WMA.Wimad.N.


While accessing the ".wma" which is a media file extension the following behavior is noticed :

1. A browser page opens to a certain webpage ( fastmp3player.com )
2. It tries to download and execute (when the user hits run on IE ) a malware from the mentioned site.......

1. This adware usually disguises itself as an "codec" for viewing or listening to media files. It states that without this product the user can't access the wanted file. A sample of this kind of strategy of spreading is explained here : Trojan.Downloader.WMA.Wimad.N
2. A window pops up while the user tries to access a certain kind of exploited media file with the title "Play Free MP3s" . It has a checkbox to validate the users choice of the products EULA to a company named "Media Holding Enterprises" . The user has the predefined choice ( the checkbox is already checked ) to install another adware : Adware.Mirar.

.................................................. .................................................. .................................................. ..................


This is an disguised application meant to trick the user to download and execute a malware. Usually it states the false incapacity of your software configuration to view this kind of media. Due to the common misconception that malware or viruses are only in executables, the user could be lead to trust this strategy and install without his knowledge the downloaded threat.

The file could be saved with different names of various celebrities, usually events or generally appealing things to users. This makes the malware spread with the help of users.

First , the malware opens a browser window to fastmp3player.com where it gets a file , which is an installer signed with the name Adware.PlayMp3z.A ( a detailed description of this malware here : Adware.PlayMp3z.A ). The downloaded file is saved with the name "PLAY_MP3.exe" .


I hope this helps you or anyone else that runs in to this Trojan

Last edited by BCOOL : May 22nd, 2008 at 01:32 AM.
Reply With Quote
  #6 (permalink)  
Old May 22nd, 2008
Liberanos5's Avatar
Junior Member
 

Join Date: May 22nd, 2008
Posts: 1
Liberanos5 is on a distinguished road
Default

Gotta love a soap box. May I have a turn?? It took me quite a while to undo "VUNDO" that I got through this "client" day one. I paid for PRO with my VISA on 05/07/08. I won't list all the hoops I had to jump through to get "clean" again but it included deleting everything and starting over....a couple a times. Now LIMEWIRE says my account has expired and wants me to pay AGAIN! Everyone that uses this computer has been given lessons on how to avoid a repeat performance....thank you URSULA for a concise and lucid description of how the virii/trojans/malware get spread around. I made both my kids read it. There's a special place in hell for writers of malicious code IMO. It keeps Bangalore busy for sure. Meanwile how do I dowload PRO again??? And yes it says LIMEWIRE LLC INTERNET NY on the transaction.
Reply With Quote
  #7 (permalink)  
Old May 22nd, 2008
90hoursleep's Avatar
leecher / n00b / nug
 

Join Date: April 26th, 2008
Location: abc
Posts: 6
90hoursleep is on a distinguished road
Default

Quote:
Originally Posted by BCOOL View Post
1. This adware usually disguises itself as an "codec" for viewing or listening to media files. It states that without this product the user can't access the wanted file. A sample of this kind of strategy of spreading is explained here : Trojan.Downloader.WMA.Wimad.N
2. A window pops up while the user tries to access a certain kind of exploited media file with the title "Play Free MP3s" . It has a checkbox to validate the users choice of the products EULA to a company named "Media Holding Enterprises" . The user has the predefined choice ( the checkbox is already checked ) to install another adware : Adware.Mirar.
yea i dont get that so im guessing im ok ? just kinda concerned when i go to delete a "blank" mp3 that wont play , and it says it wont let me because its "in use in an application , or being downloaded to"
Reply With Quote
  #8 (permalink)  
Old May 23rd, 2008
Junior Member
 

Join Date: May 22nd, 2008
Posts: 7
frylock04 is on a distinguished road
Exclamation

Quote:
Originally Posted by BCOOL View Post
Howz It 90hoursleep,

I'm not sure what you downloaded.Here is a little information on Trojan.Downloader.WMA.Wimad.N.


While accessing the ".wma" which is a media file extension the following behavior is noticed :

1. A browser page opens to a certain webpage ( fastmp3player.com )
2. It tries to download and execute (when the user hits run on IE ) a malware from the mentioned site.......

1. This adware usually disguises itself as an "codec" for viewing or listening to media files. It states that without this product the user can't access the wanted file. A sample of this kind of strategy of spreading is explained here : Trojan.Downloader.WMA.Wimad.N
2. A window pops up while the user tries to access a certain kind of exploited media file with the title "Play Free MP3s" . It has a checkbox to validate the users choice of the products EULA to a company named "Media Holding Enterprises" . The user has the predefined choice ( the checkbox is already checked ) to install another adware : Adware.Mirar.

.................................................. .................................................. .................................................. ..................


This is an disguised application meant to trick the user to download and execute a malware. Usually it states the false incapacity of your software configuration to view this kind of media. Due to the common misconception that malware or viruses are only in executables, the user could be lead to trust this strategy and install without his knowledge the downloaded threat.

The file could be saved with different names of various celebrities, usually events or generally appealing things to users. This makes the malware spread with the help of users.

First , the malware opens a browser window to fastmp3player.com where it gets a file , which is an installer signed with the name Adware.PlayMp3z.A ( a detailed description of this malware here : Adware.PlayMp3z.A ). The downloaded file is saved with the name "PLAY_MP3.exe" .


I hope this helps you or anyone else that runs in to this Trojan
OMG I DOWNLOADED THAT FILE...
but no effects though 4 days passed already I have uninstalled it already and removed from the computer even at recycle bin so how will I play the songs I downloaded? pls answer BCOOL or usrula my pc might be in danger
Reply With Quote
  #9 (permalink)  
Old May 23rd, 2008
Junior Member
 

Join Date: May 22nd, 2008
Posts: 7
frylock04 is on a distinguished road
Default

I HAVE DOWNLOADED THAT FILE BCOOL
but no effects though 4 days have past already, and I have Uninstalled it and removed programs it also so it not in my pc anymore . So how do I play my downloaded songs? It still opens the browser so same things happen what now? Does re-installing nescessary? Or is their any way that I can play the file w/o making it open a browser? PLS REPLY GUYS NEED HELP FAST thak you in advance
Reply With Quote
  #10 (permalink)  
Old May 24th, 2008
Junior Member
 

Join Date: February 2nd, 2008
Location: Somewhere, Summerside, Canada
Posts: 5
jay736 is on a distinguished road
Default

i had a few trogans downloading video clips but ZA warned me before I tryed to watch them
Reply With Quote
  #11 (permalink)  
Old May 26th, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Default

Howz It frylock04,

Your post is confusing.In the first part you say 4 days of no problems and then you say your browser is being opened by a MP3 file I guess.

If you Google Trojan.Downloader.WMA.Wimad.N. there is information on how to remove it. Other than that I can't help you......Aloha BCOOL
Reply With Quote
  #12 (permalink)  
Old May 26th, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Default

Howz It jay736.

You Just Gotta Love ZA Ya.......Aloha, BCOOL
Reply With Quote
  #13 (permalink)  
Old June 1st, 2008
Junior Member
 

Join Date: June 1st, 2008
Posts: 4
SparkyChick is on a distinguished road
Question

Hi All I downloaded this same trojan a week or so ago. I'm not technologically intelligent so I'm hoping someone can let me know if I'm "safe" now. I downloaded the mp3 and it seemed normal until I tried to play it and it wouldn't play. Tried to delete it, but couldn't. Finally, I scanned it with my AVG free antivirus/anitspyware and it showed the trojan. Here's the part where I want to make sure I'm okay and don't need to do anything else. I moved the infected result to the virus vault and then deleted it from there---is that all I would have needed to do? I haven't had any computer related problems so I'm hoping I'm good to go. Sorry for my techo-stupidity!!

Another thing I noticed that may be a tip off that the file being downloaded contains a virus....when I tried to preview the mp3 while it was downloading it wouldn't play anything....any thoughts on this or anyone else notice the same thing? I tried downloading a song today and went thru several mp3's where the same thing happened...preview wouldn't work. I cancelled the downloads before they finished and finally found one that did preview and when it finished I scanned it and it was okay. If I cancelled the downloads before they finished and they did contain this trojan, would the trojan still have downloaded or am I okay? Currently running a scan, but, not yet finished so just curious.

Thanks for any help!!!!
Reply With Quote
  #14 (permalink)  
Old June 1st, 2008
BCOOL's Avatar
Junior Member
 

Join Date: March 6th, 2007
Location: Honolulu Hawaii
Posts: 19
BCOOL is on a distinguished road
Default

Howz It SparkyChick,

Sorry to here about your problem. First may I ask, the Trojan you downloaded,was it Trojan-Downloader.WMA.Wimad.n ? This Trojan behaves by

1. A browser page opens to a certain webpage ( fastmp3player.com )
2. fastmp3player.com tries to download and execute (when the user hits run on IE ) a malware from the mentioned site.......

You describe a different behaver in that the file won't open and you can't delete it ya.

If you Google the Trojans name or go to free antivirus/anitspyware you should find some helpful information.... I not sure if your out of the woods yet.Trojans often make changes in your registry and or delete cretin files.If this has happened the damage needs to be fixed...Just to Delete the Trojan will not do that.

When you are downloading a MP3 you should be able to preview it ya.I myself would not trust a file that didn't preview...That fact you stopped the download you should be OK.I would check your Incomplete folder and see if there's any sign of it there.If there is delete it.I understand your running a scan know if nothing shows up you should be fine.

REMEMBER, you should always scan all files you download with Limewire before you open them.

Please let me know the name of the Trojan you downloaded for my own information.

ALOHA,BCOOL
Reply With Quote
  #15 (permalink)  
Old June 1st, 2008
Junior Member
 

Join Date: June 1st, 2008
Posts: 4
SparkyChick is on a distinguished road
Default

Hiya BCOOL

Thanks for the help. You're right, it was a different infection....downloader.wimad.n. I had actually Googled this when it happened, but, results were mostly in other languages. From what I can gather, it's possibly a keylogger??

I do now recall that it was my AVG antispyware that detected this and not the Antivirus. I followed what AVG suggested...moved the infection to quarantine and then maybe healed it?? I know I had to restart my computer in order for the process to be complete. Sorry...I know--I don't deserve to use a computer!!

Unfortunately, I can't go back to check things so I can give better specifics. AVG Free used to be two programs---an Antivirus and an AntiSpyware. As of 5/31 AVG is now one program with both Antivirus and antispyware all in one and when I installed this new program, the old ones uninstalled.

All scans since the problem have not found anything new if that means anything.

Any help/ideas/suggestions/info, etc on this infection or if you think I am okay or need to do more would be GREATLY appreciated!!

Thanks!
SparkyChick
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 07:01 PM.


Powered by vBulletin® Version 3.6.11
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0

Copyright © 2007 Gnutelliums LLC.
All Rights Reserved.