Gnutella Forums - Limewire Acting Wierd (PLEASE HELP!!!)

Gnutella Forums (https://www.gnutellaforums.com/)

- General Windows Support (https://www.gnutellaforums.com/general-windows-support/)

- - Limewire Acting Wierd (PLEASE HELP!!!) (https://www.gnutellaforums.com/general-windows-support/39421-limewire-acting-wierd-please-help.html)

lol! My ctrl + alt + delete task mrg works now too! But i still cant get rid of the system Idle process!

thank you ewido!

I had the same problem, basically:
- ctr+alt+del not working
- limewire popping up after i shut it down
- "complete" file appearing as shared folder on limewire with 25,000 zip files.

I tried EVERYTHING mentioned, and managed to find and delete te complete file but everything else stayed the same.

thanks to ravendhi though, i downloaded ewido, ran a quick scan andnow the problems sorted!

i have this same problem with limewire pro, cept i dont have this winupdate.exe thing anywhere ??

Quote:

Originally posted by BobbyNaini
I had this exact same problem, and after literally 24 hours of analyzing every inch of my computer, I solved the problem. I suspect that based on your descriptions of the problem (which I had as well), you are infected with a virus. It's unbelievable that none of my AntiVirus packages picked up this infection.

For me, everytime I restarted my computer, Limewire would automatically load up. Even if I closed it, it would just open back up again. On top of this, I could not even access the Task Manager in Windows XP to allow me to force a shutdown of Limewire. I hit CTRL-ALT-DEL and nothing would happen.

Anyways, here are the steps that need to be taken.

1) Uninstall Limewire. You can reinstall it at the end of these steps.

2) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

4) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

5) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

6) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

7) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

8) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

9) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

10) Finally, click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

11) Now restart your computer. Reinstall Limewire.

This should hopefully fix your problem.

Bobby Naini

Your post has been really helpful and has solved my problem. Norton couldn't, so I am very grateful for your clear and straightforward instuctions. Thank you!

hello, i used the eiwo (sp?) virus deleter thing to get rid of the virus because i couldnt find my system32 folder . i was wondering tho, if u install lime wire again, how can u be sure it wont install the virus again?

edit: lol at my name, i just bashed my keyboard for a username, didnt realise what it siad so i dont mean to offend anyone

Thank you everybody that posted tips.

I found the file that contained all those zip files.
The file name that was messing up my computer was msmovies

Thank you again for relieving me from this nightmare.

Quote:

edit: lol at my name, i just bashed my keyboard for a username, didnt realise what it siad so i dont mean to offend anyone

let me test it

kjwihe

That all i bashed on my keyboard.... HI MY NAME IS KJWIHE!! hehehe :D :p :rolleyes:

u gotta bash it with both hands lol :D

i bash my keyboard often to make up usernames, it was prolly my subconscience

Hello there, just wanna say a BIG THANX to BobbyNaini, thanks mate, u helped me to get rid of the virus.

just a remark - my one was called WINLOGI.EXE. Just so everyone knows:)

Cheers!

Quote:

Originally posted by BobbyNaini
3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

Funny thing is, even after searching every little spot of my Windows folder, I can't find my Task Manager. Its as if it was deleted entirely from my computer.

I think I'm going to simply reformat and start off fresh again and unfortunately, find another P2P downloader and hope I can steer clear of these problems. :(

EDIT: My (mostlikely shortterm) fix (I'm overly aware I've not fixed it, just hidden it. Basically lack of a better word I guess) was to go into Run > Msconfig > Startup and thats where I noticed that there where so many things that shouldn't be, but have been starting up when my system starts.

I ticked the ones that I suspected (possibly even things that aren't affected by this problem) off. They were the following:

221
svhostcs32
IMJPMIG
MsMovies
TINTSETP
TINTSETP
qttask
jusched

EDIT: Next problem, the 221 and svhostcs32 are very smartly coded. When I turned off the first ones, they doubled, I did it again, now I have four. After this, I suspect I'll have eight of them in my startup area. :(

EDIT: After large amount of consideration (popups saying many different problems have arisen and forced shutdowns), I've come to the decision I'ma reformat for sure.

I was wondering, are my downloaded files at all going to be affected by these problems and is there any way that I can install LW without having this happen and or can I eliminate the problem before it eliminates my Task Manager?

Why do LW allow this to come with the installation file?