Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old March 21st, 2008
Apprentice
 
Join Date: March 19th, 2008
Posts: 5
M4573RM1ND is flying high
Default

Quote:
Originally Posted by View Post
I had this exact same problem, and after literally 24 hours of analyzing every inch of my computer, I solved the problem. I suspect that based on your descriptions of the problem (which I had as well), you are infected with a virus. It's unbelievable that none of my AntiVirus packages picked up this infection.

For me, everytime I restarted my computer, Limewire would automatically load up. Even if I closed it, it would just open back up again. On top of this, I could not even access the Task Manager in Windows XP to allow me to force a shutdown of Limewire. I hit CTRL-ALT-DEL and nothing would happen.

Anyways, here are the steps that need to be taken.

1) Uninstall Limewire. You can reinstall it at the end of these steps.

2) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

3) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

4) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

5) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

6) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

7) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

8) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

9) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

10) Finally, click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

11) Now restart your computer. Reinstall Limewire.

This should hopefully fix your problem.

Bobby Naini
Looks like I'm in trouble. I have the same problem (Limewire constantly trying to pop up/no task manager), but when I copied the task mgr to the desktop and looked at it, the CPU usage was at only about 0-16%.

Wait, whenever I first look at it, it immediately spikes to 100%, then comes down for a bit, then spikes somewhere between 25-80. Oddly enough, only a little while afterwards, it began spiking alot again (I'm typing this as I watch it). So far it has spiked 85% or more 3 times in the past two minutes. The current largest process is System Idle Process, under username SYSTEM at anywhere from 73-98 at a time (it only has 16K Mem usage). After this is firefox (which I am using) and taskmgr.

In the mean time, I'm going to turn System Restore back on since it doesn't look like a virus.

Any help would be greatly appreciated.

I'm going to close out of the limwire thing that says I should reinstall so it'll work, and watch to see what pops up when it comes back and how much CPU usage will be used during this time.

EDIT: Now this is getting weird. when it tried to pop up, LIMEWIRE.EXE popped up for only a second...then it dissapeard entirely from the list of programs. However, I am not recieving the little thing that says I should reinstall it to get it working again. Where is the limewire.exe hidden?

EDIT part II: it stays up when the error message appears, but when I click out of it, limewire.exe is gone completely. How can I stop this?

Last edited by M4573RM1ND; March 21st, 2008 at 01:06 PM.
Reply With Quote
  #2 (permalink)  
Old March 30th, 2008
Novicius
 
Join Date: March 30th, 2008
Posts: 1
anon67892794 is flying high
Default Its a virus and here is help

Hello M4573RM1ND,

LIke you, I spent the better part of my day trying to rid myself of this "limewire.exe" worm or virus or whatever. I tried the info you quoted with no luck, downloaded BFU and tried that with no luck. I finally took some other advice on these pages and downloaded AVG's free trial antivirus from their website at AVG.com. Once installed and ran, it found many worms, viruses, Trojan horses, adware, etc that my updated norton AV did not. The annoying limewire still popped up after the scan was done and malware removed but AVG prompted me to restart and I am happy to say on restart the offending problem is gone. I did feel that my internet browsing was slower with AVG installed so I uninstalled it later in the day. On another note, I have not reinstalled Limewire and am unsure if I will again. let me know if that helps...

Best of luck

anon
Reply With Quote
  #3 (permalink)  
Old June 19th, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Thumbs up

Holy Cow Hes RIGHT!!!!

I kept getting this firewall alert telling me <Do you want to allow winupdates.exe to access the internet?> i suspected something fishy because it had already asked a couple of weeks ago and i have already had it automatically downloading them. So i said NO. Thank god i did. mine told me it was something like innosetup.exe trying to use winupdates.exe to do this. But theres one problem. I cant find my system32 folder!!! it has to be there but searching the hard drive cant find it and i also searched for tskmgr.exe with no luck. Where is it? i looked in the C:/windows directory but its not there.. plz help

another way io know hes right is ctrl alt del doesnt work. i cant open regesit either. this guy is right on the friggen ball!!!!!!!
Reply With Quote
  #4 (permalink)  
Old June 19th, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

It has also apparently eaten up my printer stuff because my printer suddenly disappeard evcen though the software and drivers are still there it tells me its not. also when i try to install a printer it says it cant because the <printer spooler service aint running>
Reply With Quote
  #5 (permalink)  
Old June 19th, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

I would edit these posts but for some reason my browser keeps telling me i followed an invalid link and i cant.

In C:/Windows/prefetch folder ther is a file with winupdates in the filename It has to do with this virus so DELETE IT!!
Reply With Quote
  #6 (permalink)  
Old April 14th, 2006
Apprentice
 
Join Date: April 13th, 2006
Posts: 5
sundance is flying high
Default Bobby Naini

I am getting the same thing but was not able to follow your directions. Here is what is going on with my system (P4 1.2, 700+ MB memory, win XP fully updated).

As you said Task mang. would not run with the normal key strokes.

I could not find system32 in the win dir, it wasn't there. I did a search for taskmrg.exe and found it and put it on my desktop.

I ran it and found cpu usage to be at most 11%.

I looked for winupdates.exe and did not see it.

I was able to uninstall LW and of course it no longet starts every few sec. or when I open some programs ......but I get a java error message telling me it can't start so it's still there just the program is not there to run.

Have you any help for me to get rid of the POS?

Thanks,

Steve
Reply With Quote
  #7 (permalink)  
Old April 17th, 2006
Novicius
 
Join Date: April 17th, 2006
Posts: 1
whau is flying high
Smile wonderful

all of my friends have downloaded limewire and always said how they never had problems with it so i downloaded it...what a mistake. but after following these step's i removed anything that looked suspicious and now im a happy man!
Reply With Quote
  #8 (permalink)  
Old May 24th, 2006
Novicius
 
Join Date: May 24th, 2006
Posts: 1
SeraphimDeath is flying high
Unhappy what if...

what happens when you uninstall limewire, but a notice keeps popping up that says copy report at the bottom. it has a bunch of descriptive errors and such in the document. i shut it all down and when i came on today, i tried to open up Word, and it froze. word has been doing that ever since i got limewire. what the heck is happening?
this is what the message looks like:


Last edited by SeraphimDeath; July 14th, 2006 at 07:02 PM.
Reply With Quote
  #9 (permalink)  
Old May 27th, 2006
Novicius
 
Join Date: May 27th, 2006
Posts: 3
Bladecutter is flying high
Default

Quote:
Originally Posted by SeraphimDeath
what happens when you uninstall limewire, but a notice keeps popping up that says copy report at the bottom. it has a bunch of descriptive errors and such in the document. i shut it all down and when i came on today, i tried to open up Word, and it froze. word has been doing that ever since i got limewire. what the heck is happening?
this is what the message looks like:

Go to program files, Press L untill you get to Limewire and just delete the folder. Thats how I fixed it for myself.
Reply With Quote
  #10 (permalink)  
Old May 27th, 2006
Novicius
 
Join Date: May 27th, 2006
Posts: 1
cara is flying high
Default can some one please please help me

I downloaded lime wire and the player on it will not play my downloads when it does play it sounds as if its jumping and freezing all of the songs are doing it.Iv tryed uninstalling it and re installing it and nothing its still the same.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Limewire is Acting funny???Messing up Windows! SRT4pssh General Windows Support 6 October 17th, 2007 12:17 PM
Limewire acting odd. Possible virus?? wjhsMandy General Windows Support 4 June 23rd, 2006 11:06 AM
Limewire acting weird..help sidhaanth Windows 2 November 8th, 2005 07:24 AM
LimeWire acting up...again DJ609 General Windows Support 0 April 27th, 2005 12:56 PM


All times are GMT -7. The time now is 09:24 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.