That says end its process right? Or did i miss read it?

Dam, i used avast virus cleaning tool to scan the prefetch folder and no virus was found..... SO what now? I cant find any virus in prefetch and cant end System Idle process....

Have a look at each of the thread links that discuss this. I believe there's at least one that says which file to remove in order to put functionaliy back on the map. It's in regards to start up items afaik. But read it & you might find i'm wrong (I haven't read it for a couple of mths at least.)

The links are: ...............

ARGH!!! I still cant find a file in the folder prefetch!!! Help me!!!

I think I may have found another file name for the infected firus file.
In the instrunctions it says delete anything with winupdates in it.
I have a file called aupdate.exe that was created the same day as i obtained the virus. Could this be the file?

Hi all, I've had the same problem for a couple of weeks and it has been driving me crazy. I followed everyones directions but nothing would work, tried numerous anti virus programs and still nothing.

It wasnt until I noticed some strange folders that appeared on a couple of scans which i didnt reckonise, i couldnt find them even with hidden folders and files shown. I found 2 folders that contained 1000's of .zip folders that all contained virus's and where named after films and games. I found these in the below directories;

C:\Documents and Settings\James\Complete
C:\Uploads

I believe LW is picking these folders up and displaying them on searches. They all had a file called MOVIE, which is this stupid virus/worm :mad:

Both the above folders contained these .zip virus folders. I had to manually type the above in either DOS or in the address bar in Windows.

Once I deleted these folders I repeated the steps everyone suggested and found that I had a few virus/worms on my comp, there are

winupdate.
winupdates.
MsUpdate.
ms-update.

Once these where removed the problem stopped (well so far, fingers crossed)

Hope this helps any other fustrated users.

James

I found that folder with all those zipped folders with a file called movie in each of them.
It was like 1.3GB the folder!!!
Most of it was like in some latin or something language to....so its long gone now.
I found MSupdate too, its deleted.....
STILL GOT VIRUS!

the weirdest thing jst happened,

Norton just came on out of nowhere, and said that it found 2 virus' on my computer 'Winupdates' and "svchost' or something, repaired them, and now i can use the Ctrl+Alt+Del again, i have no idea how it found them or why it took this long but it seemed to fic everything!

have faith everyone, u never know when something might happen!

thanks for all the help on this forum too guys!

thanks!!
 

yeah!! it totally worked.. my worms were called the following:

msupdate.exe
ms-update.exe

it creeps up on you though because when you open up the task manager, it DOES NOT take up any processes % at all!! so please be aware of that!!


thanks so much you guys!!

lol! My ctrl + alt + delete task mrg works now too! But i still cant get rid of the system Idle process!

thank you ewido!
 

I had the same problem, basically:
- ctr+alt+del not working
- limewire popping up after i shut it down
- "complete" file appearing as shared folder on limewire with 25,000 zip files.

I tried EVERYTHING mentioned, and managed to find and delete te complete file but everything else stayed the same.

thanks to ravendhi though, i downloaded ewido, ran a quick scan andnow the problems sorted!

i have this same problem with limewire pro, cept i dont have this winupdate.exe thing anywhere ??

Your post has been really helpful and has solved my problem. Norton couldn't, so I am very grateful for your clear and straightforward instuctions. Thank you!

hello, i used the eiwo (sp?) virus deleter thing to get rid of the virus because i couldnt find my system32 folder . i was wondering tho, if u install lime wire again, how can u be sure it wont install the virus again?

edit: lol at my name, i just bashed my keyboard for a username, didnt realise what it siad so i dont mean to offend anyone

Thank you everybody that posted tips.

I found the file that contained all those zip files.
The file name that was messing up my computer was msmovies


Thank you again for relieving me from this nightmare.

let me test it

kjwihe

That all i bashed on my keyboard.... HI MY NAME IS KJWIHE!! hehehe :D :p :rolleyes:

u gotta bash it with both hands lol :D

i bash my keyboard often to make up usernames, it was prolly my subconscience

BIIIIG THANX
 

Hello there, just wanna say a BIG THANX to BobbyNaini, thanks mate, u helped me to get rid of the virus.

just a remark - my one was called WINLOGI.EXE. Just so everyone knows:)

Cheers!

Funny thing is, even after searching every little spot of my Windows folder, I can't find my Task Manager. Its as if it was deleted entirely from my computer.

I think I'm going to simply reformat and start off fresh again and unfortunately, find another P2P downloader and hope I can steer clear of these problems. :(

EDIT: My (mostlikely shortterm) fix (I'm overly aware I've not fixed it, just hidden it. Basically lack of a better word I guess) was to go into Run > Msconfig > Startup and thats where I noticed that there where so many things that shouldn't be, but have been starting up when my system starts.

I ticked the ones that I suspected (possibly even things that aren't affected by this problem) off. They were the following:

221
svhostcs32
IMJPMIG
MsMovies
TINTSETP
TINTSETP
qttask
jusched

EDIT: Next problem, the 221 and svhostcs32 are very smartly coded. When I turned off the first ones, they doubled, I did it again, now I have four. After this, I suspect I'll have eight of them in my startup area. :(

EDIT: After large amount of consideration (popups saying many different problems have arisen and forced shutdowns), I've come to the decision I'ma reformat for sure.

I was wondering, are my downloaded files at all going to be affected by these problems and is there any way that I can install LW without having this happen and or can I eliminate the problem before it eliminates my Task Manager?

Why do LW allow this to come with the installation file?

What I found on my computer.
 

First, thanks to everyone for all the help here.
For me it wasn't "winupdates" it was a file called
"MSMOVIES" located in the prefetch folder. Good luck.

didn't fit...maybe i'm too stupid...or did mistakes at translating from english to german...but wayne... i couldn't find any process that takes quite 100% of my CPU. next my taskmanager doesnt open anymore by hitting [Strg]+[Alt]+[Entf] (normal key combo for opening t.) and there's a program calld xz, i cant delete... whatever i do it's already there again =/... plz if anyone knows a solution (maybe in german too :] ) HELP ME...after kazaa now lime wire is going to mess up with my computer...(maybe it's a curse)

Limewire spazzing out/ re loading
 

Its a virus, simple as that.

It also prevents you running Taskmgr.exe (Task manager) or regedit.exe (Registy editor)

Fisrtly in search your computer for msmovies.exe and delete it.

Then search for regedit.exe and run it.

Within regedit, highlight My Computer and click Edit/Find msmovies.exe It'll probably be in the C:\WINDOWS\Prefetch folder

Delete any entries which make reference to this file msmovies.exe

I have heard of a user who has had a similar problem with another file called winupdates.exe which again was a virus sitting in the memory designed to keep re-loading Limewire.

No doubt there will be more and with different names now, sooner or later.

The easiest way is to open task manager and if your computer wont run it search for taskmgr.exe, run it and try removing one task at a time, then close Limewire and give it 30 seconds to see if it re-loads before removing another task. This way you will identify the name of the offending program. Then look for this offending program in C:\WINDOWS\Prefetch and other locations if it is not there. Then delete it.

See it's simple good old fashioned computer detection work, so all you Computer Geeks stop rattling on about JAVA updates, internet options and other bollocks that doesn't work but just sound complex and posh.

You can do this in safe mode if you desire but I didn't and it was ok and now problem free.

Alex Nisbet

:p

Hello, i had the same problem as many of you, maybe this helps you in some form:

As you know, it was a virus, and that virus was installed because a file that was downloaded from a p2p program, like Kazaa, Limewire, etc. it seems that supports many of them.

When someone is infected by that virus, it makes a search, trying to find the Shared folder of one of the p2p programs supported and places a dummy file in that folder. The name of the file is obtained frow the names in warez pages, like phazeddl.com and others, and makes a zip file with a setup.exe file inside with a size of about 700kb or more, and because it is in shared folder, it is downloaded by members of the p2p programs.

If you download one of that files, and execute setup.exe it opens a dummy installer that sends an error to make the user that it wasn't installed, but in that moment it installs the virus and that installs a process, in my case it was winupdate.exe if i remember well.

Also the virus changes taskman.exe for a dummy file, that why you can't use Ctrl. + Alt. + Supr.. And creates some dummy com files for many common commands, like ping, regedit, etc. (about 10 in total). This is because when you call a program without the extension (.exe in this case) it executes the one with more precedence (.com haves more precedence than .exe), so when you try to execute one of this commands, it executes a dummy file, that does nothing.

Also as you have seen, it executes limewire every 15 seconds or so, so basically the computer begins to be full and slow.

THE SOLUTION (for me)

First, i changed the name of the Limewire was installed (to Limewir) so the virus could not execute limewire.

And easily enough, it was removed using Microsoft Anty Spyware Beta (last update). It detected the trojan and restored my taskman.exe file.

After that, i removed the .com copies(dummy's) of the command files the program installed.

And finally renamed my limewire folder and checked the shared folder to see if a file containing the trojan was created.

Maybe this can help you, i'm a Computer Systems Engineer and have experience with computer since i was 5, but this trojan was one of the most annoying things i have seen.

In internet you can find more information, using the name winupdates.exe and doing a google search. :D

Hi,

I think I have the same problem. Ive followed the instructions provided and I've copied taskmgr.exe, but its not allowing me to paste it to the desktop. What's wrong?

Also, I ran a search and found winupdates, so cant I just delete it?

Other people on here are also saying that Ctr-Alt-Del doesn't work, but for me it does.

This problem started this morning for me, and whe, I turned my computer on, I had to restore my active desktop, however I can't do that. When I clickon 'Restore my active desktop' nothing happens. Am I experiencing the same virus?

This is what I see when I press Ctr-Alt-Del:

http://img.photobucket.com/albums/v2.../ctraltdel.jpg

EDIT: Also, what does this virus actually do? Is it just a really annoying few little things that can be aparently sorted, or are there more serious affects?

Hello, it seems that the virus is only annoying and it sends itself to other people when it makes copies of it in the shared folders of many p2p programs. Also i read that it connects with a web page (don't remember the page) and can download other trojans. At least it didn't manage to do some damage in my computer, but i don't know for certain if it can do something.

To remove winupdates you need to avoid it from loading when you restart your computer or to use anti spyware software (like Microsoft Anti Spyware beta) so they detect the trojan and remove it from memory.

It seems that it is the same virus, but i don't know about your problem with active desktop, it wasn't my case.

As i said before, using Anti Spyware, the virus was detected and removed and after that i remover the directories and files created by the virus(you can check them in my other post).

It's a very annoying trojan. It took me about 2 hours to remove it (i didn't know anything about it), but at least it didn't remove any files or made another type of damage.

I hope this helps you.

I started 2 follow the Task manager method etc. but their was no process called winupdates or any thing using 100% except for system idle process at 95% and i still kept getting the error message

wat do i do now?

Up to Processess
 

I have gotten my task manager to open but no process other than system idle are using any of my cpu. I can't find the virus and now that I have uninstalled LimeWire my computer keeps trying to open it and it won't let it. How do I fix this? I have been trying now for the better part of three hours. I don't know what other process it could be other than winupdates.exe, which is not showing up. I am getting so frustrated with this and desperately need to know how to eradicate the problem before I can log off. Please any other advice?

Try using the Microsoft Antispyware as i said before. It was effective in my case, i only had the virus for about two hours and is very annoying as you say. Since i removed the virus, i haven't seen any problem related. Check my posts in this thread to see if they help you.

To update everyone - I recommend to surf through all threads related to this issue - you'll find different versions of this virus, different names (for me it was winlogi.exe (yes, without the "n" at the end :))

just try to search the threads for virus or problem etc.

there's tons of stuff for this topic!

Lukas:D

Yes, as he says it seems that this virus(or trojan more correctly i thing) has many different names. But sometimes it only some common sense to see if there's a name in the taskman that seems suspicious or that you don't remember.

Doing a google search is useful at most times or use tools like Spybot, Microsoft AntiSpyware, WinTasks, Security Task Manager, etc that can help to identify possible virus and adware.

It's not to difficult to get rid of this annoying pest and thankful there's many information about how to do so, so you're not alone.

Ok, this same thing happened to me, but a different name was used for the crappy virus.
it was MsUpdate.exe
whoever made that stupid thing should jump out a window while lit on fire
btw that guy before was right. he should be applauded for all of that effort he took.

Delting limewire??
 

When you say that, does it mean like completely deleting it, so ALL of my shared files get deleted?? Because that is a hugge sacrifice for me :-)

There's more descriptions here about how to fix it LimeWire continually Popping up & also Opening at System Startup (click on link) Also, if you're not sure how to go about it yourself, register at Norbie's site & get him to help you. See NorbiesWorld (click on link)

Man, I don't know if it's only me or w/e, but my task manager wouldnt open either, so I C and P like you said, but the only thing that it shows are the tasks....and that's it....nothing else...no processor tab...nothing, just the tasks....wtf, my comp is ****** for sure....

In the post above yours by the lord there is a link to Norbies world go there he will help you fix it.

OK ive just spent 6 hours trying to fix this and in the end, the solution was so simple!
My pc had the classic symptoms:-
Limewire opening repeatedly, 15 seconds after it was closed.
ctr,alt,delete was not displaying task manager.
I found 2 'strange' folders on my pc, the 1st one was 257Mb and contained 1300 zip files each was 197K and contained one file and most were named after movies. The 2nd folder was very similar, but contained installer files.
Of course i deleted the lot immediately without unzipping or clicking anything.
I ran NAV,Spybot and Adaware.
Adaware found worm win32.p2p-Worm.Alcan.a
I deleted/quarantined it but everything was still the same.
I copied task manager onto desktop, so i could open it.
As it transpires, the offending process was masquerading behind the name svchost.exe (alongside 6 other genuine ones)
I ran msconfig and selected diagnostic startup and low and behold, the offending process showed itself in task manger (whilst in diagnostic startup)
The offending article was a install file called svchost.exe and was located in:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
I deleted the item and restarted my pc.
Problem fixed, no restarting limewire :)
I even opened limewire from the start button and closed it again to make sure, but its all good :D
I hope this helps somebody spending hours and hours like i have done today :D

TD.

I to found my virus to be svchost.exe. This file is in fact in the startup registry and the way I solved it was to delete all the proccesses of that name (I had a lot) using task manager (copy to desktop if you can't open it normally). Then a message came up saying about an error and the system will shut down in 30 seconds (or something like that). Just ignore it and make sure all the processes are gone. Then goto the actual program under start > all programs > startup or c:/> documents and settings > all users > start menu > startup. Try to do this before the computer shuts down (I found the start method quicker).

I hope this helps :). It helped me sort out that problem.

Samrulez91

If you deleted all of the processes named svchost.exe you had better get you copy of windows out and reinstall. I think the proper terminology is you ended the process. If you deleted all of the svchost.exe windows will not operate properly if at all. And telling people to delete all processes named svchost.exe is wrong all it wll do is mess up their system. svchost.exe is a critical part of the windows operating system. The link below will explain what it is.

http://www.justtext.com/processes-ta...chost-exe.html

Now on the other hand scvhost.exe is a virus that masquerades as svchost.exe and should be removed. Your post above was probably a mistake or a tipe-o but you should edit it and correct it so people don't mess up their computers and TURBODIESEL should edit his post also. The link below tells you what scvhost.exe is.

http://www.justtext.com/processes-ta...vhost-exe.html

well this might help, on my computer it was under maplom.exe

ow and one more thing ppl check in this directory C:\Documents and Settings\"what ever your account name is" see if there is a file called "Complete" on my computer it was hidden you might have to change your folder settings so you can see it, but eny way the virus made the file and it is aprox 1 gig it is filled with nealy 10,000 little files all with the virus in them the only virus program that picked it up for me was AVG

Hi. I had same problem, was running avast av. tried everything, went and bought nortons and it found 6300+ all in file called complete. had to show hidden folders to find it, good luck all with this nasty little bugger. Charla

I've tried the same thing but I didn't find anything in the Windows Task Manager that was running anywhere near 100% except for the one thing that was supposed to be running that high. If there is a solution for my problem, I really could use it. LimeWire is a great program but it is really starting to **** me off.

you sir, are awesome. thanks :)

Ok this seems a tricky little begger to get rid of. Why? Because it comes under many differnt guises.

Mine was called wmplayer and looked like a windows media file. However when i clicked it it wouldnt play which made me realise what it was.

So follow TURBODIESEL's instructions on the previous page but instead of the scvhost look for wmplayer. Dont worry it isn't your actual WMplayer.

Or simply....

Go have a look in the regestry under HKEY LOCAL MACHINE - SOFTWARE - MICROSOFT - WINDOWS - CURRENT VERSION - RUN

Then to the right you will see wmplayer. Look across under the DATA column it will read p2pnetworking. Delete this little blighter.

Go to task manager and under PROCESSES look for a process named wmplayer. End the process.

Next go to My Comp - C: - Docs and Settings - All users - Start Menu - Programs - Start

Look for the wmplayer and delete. Its a fake program, and no the real Media player.

This should solve the problem.

If none of this makes sense then sorry but it took me 6 hours to solve this and it is now 2am.

This didn't work for me (this time...although it worked once before.)

I had no winupdates.exe file (or any other file using a lot of CPU).
Also: I can't even open my regedit (even using the method listed here), I get a message telling me that another program is using the regeditor.

Is there anything new I can do to sort this out? I don't want to lose LimeWire totally...

Go to Norbies World he will be able to help you.

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html

Tried everything that was suggested with no luck.:mad:....many thanx to Grandpa who advised Norbies world at http://www.norbiesworld.co.uk/Forums...ic/t=1295.html downloaded ewido antimalware and hey! presto! did the job no more limewire pop up every 15 secs and got my task manager running again.
No fewer than 902 files had to be deleted they were in the startup disguised as a svchost.exe file infection was called Dropper.VB.lu
Hope this helps anyone with this cursed worm :D

I uninstalled limewire, but this java window says "could not find limewire component" and it won't leave me alone, so I uninstalled java and now I'm getting a window that says "limewire could not find java" and that won't leave me alone either!!!!

I appreciate your efforts. Was able to fix everything in 10 minutes. Haven't got that dirty in windows in a while but I really appreciate it.