virii don't usually care for restore points. I don't believe it will work.

He's absolutely right. It's not enough to use a restore point. So long as the executable file is on your system, it can re-insert itself into the registry an infinite number of times.

Going through the steps I've outlines will get rid of it for good. It really only takes 20mins.

Bobby Naini

Limewire refusing to stay out of the system tray was the reason I had asked for help, but I checked out everything mentioned in the solutions in this thread, and found nothing on my (new)computer that was as described there. There is no file consuming high CPU. There is no file called winupdate or anything with "win" in it in the Prefetch folder. I CAN access the Task Manager. I did, however, delete Limewire. I took fright.
I have downloaded some rare and thrilling music from Limewire and hate to lost it. Moreover, I had eliminated the problem of having it appear at startup using "Advanced System Optimizer" utilites. I know that was just a bandaid on the problem, but I don't seem to have the other problems other users have mentioned. If I do nothing further, am I just cruising in ignorant bliss?

Yeah, i figured that much about the restore point..

My Norton scanned the pc and found 5 infected files and deleted 4. Then I did the System Restore thing, I turned it off and scanned the computer again and nothing was found.. I try the control + alt + delete and it works perfectly and my cpu usage is of 4%

Did my AntiVirus got rid of it??? How do I know for sure??

Thanks!!

Oh yeah! I also deleted it from the registry..

This is what my antivirus calls the worm http://securityresponse.symantec.com...2.alcra.b.html

Thanks y'all

I suspect I had the same problem. Limewire would start on boot-up, even though it was not supposed to. My task manager would not start. I ran Kaspersky, it found thousands of problems, including a few P2P entries, and a problem with winupdate.

So far, Kaspersky seems to have taken care of everything. I'll keep checking for hiccups!

To add a couple more things that need to be done.

check this site: Info from Trend
The information there lists more files you need to look for and delete.

I also found another instance of bszip.dll in my windows\system32\ folder. Deleted.

After following all of the actions listed in this forum, those on trend's site, and more, I still don't have complete resolution.

Regedit will not run from it's original location, but taskmanager will.

I'm not sure what else is dinked up.

Tom

More info and files to delete.

click here

Fixes my run regedit issues.

Tom

Sry if someone already posted this, but im too lazy to look.

I was following Your directions and everything was going smoothly until step #8. The thing i find in regedit when i search for winupdates doesn't want to be deleted. I try to, and click yes to confirm, then it says "Unable to delete all specified values".

Thank you for your help and very specific directions, and sry again if I just made a stupid mistake somewhere in the steps...

Limewire still will not run on my system.

I did a search for "lime" and found more instances of the original zip file that contained the setup.exe file that probably causes the problem.

I uninstalled LW again and deleted those files and all the limewire files except the original setupfile for limewire.

Pay attention to the directorys when you do the search. If you know what belongs and what doesn't, it can tell the tale.

Tom

I got all the same syptoms and the same solutions worked, (though I still have to get regedit working, only works if i type 'regedit32 at the moment) however, the files it put on my system were c:\program files\outlook\outlook.exe, p.zip and v.tmp. Also, outlook.exe doesn't show high cpu usage in the taskman dialog, but once I deleted it, ctrl-alt-del started running taskmgr again. any thoughts on regedit greatly appreciated.

Nipper,
Look in the \windows\system\ folder and you will probably find a regedit.com file. Delete it.
If you check the link I posted just 4 rows up, you find this list of files that need to be deleted:
cmd.com
netstat.com
ping.com
regedit.com
taskkill.com
tasklist.com
tracert.com

Make sure you get them all.

Tom

OK guys, BobbyNaini did a lot of work on this limewire reopening. I followed all his steps, but it still didn't work for me! I had 'no' usage problem, infact- winupdates wasn't even there. But I still followed all his steps and continued on. While I was in my regestries, I also did a search for limewire & limewire.exe and deleted all the files I found and continued hitting the F3 key and deleting the regestry. after it finished, I did a search for winupdates, only finding one. I deleted it. After reboot limewire reopened again. Getting P'd off, I did a standard search, 'start' 'search' 'find files and folders' and typed 'limewire'. After the search there were quite a few files & folders found. I hit edit, select all and deleted everything found. Good-bye Limewire. It hasn't reopened since. I reinstalled limewire again from the begining. It worked for me. I encounted this problem after picking up the PWsteal trojan virus. I got rid of the virus using norton. As I have read some of the other problems people are having, I too lost my system32 file. regedit wouldn't open, taskmger would'nt open, and so on. All you have to do is a search for them. Go to search, find files and folders, and type cdm.exe regedit.exe abd finally taskmgr.exe After each file is found, right click on it and hit 'open containing folder'. You then can right click on it and copy, then paste it to your desktop like BobbyNaini explained. then they will work. Then try again to follow BobbyNaini's steps. I hope I have been some help.... GOOD-LUCK

Hello again...
I have read some post about losing download files, or not being where they should be. What I do is download a song. like for example 'Beatles'. Then do a search for the song. When I find it, I right click it and hit 'open containing folder'. At the top you will see what folder it is in. Or hold the curser over it without clicking, it shows the full path. Then I X-out, go to the folder and right-click on it and hit 'Create shortcut' then paste it to my desktop. From there you can put it anywhere you want it. I am also posting a link that everyone should read and follow.

http://www.eff.org/IP/P2P/howto-notgetsued.php's

Again I hope I've been a help