Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   General Windows Support (https://www.gnutellaforums.com/general-windows-support/)
-   -   Limewire opening on Startup (https://www.gnutellaforums.com/general-windows-support/39468-limewire-opening-startup.html)

BishopNash November 26th, 2005 08:31 AM

no problem Gramps!

How are u for socks this Christmas? LOL

Glad that cleared things up!


Regards
The Bishop

austriandragon March 5th, 2006 09:27 AM

Re: Worm.Win32.VB.an or Zodiak
 
Quote:

Originally posted by kmag
[Newly added]
It looks like this is called the "AN Worm" or the "Zodiak Worm".

I finally got my hands on a copy of this malware. I tested it against free trial versons of Norton AV and Kaspersky AV (and updated the virus definitions for both). Kasperky detects it as Worm.Win32.VB.an. Norton misses it.

There are two free trial versions of Kaspersky Antivirus on download.com

http://www.download.com/3120-20_4-0.html?qt=kaspersky

It's late. Let everyone know

[End of new stuff]


If your antivirus software had detected this virus, it probably would have moved the virus files (winupdate) to your quarantine folder and they wouldn't have been there when you tried the manual removal steps above. However, I'm not familiar with the specifics of AVAST.

AVAST's own website has a list of viruses, but it doesn't list anything named "Adware", so my guess is that it is detecting some kind of adware program (popup generator) and quarantining that. If I had to make a guess, I would guess that AVAST added virus definitions to make it's antivirus program think that various adware programs are viruses, and remove the adware just like it removes viruses. However, I really don't know enough about AVAST to know what it has found based on your description. Unfortunately, different anti-virus vendors often use different names for the same virus.

In any case, if your quarantine folder doesn't contain any winupdates files, my best guess is that AVAST caught some other nasty thing on your computer.

Hi!
I installed LimeWire last week and had the same problem as you: LW opened again and again although I closed it. I tried to follow your steps to delete "winupdates". But it won't work because I couldn't find "C:\windows\prefetch". Maybe it is because I have Windows ME. Please help me!

wondering why March 6th, 2006 01:21 AM

If your having trouble ridding yourself of this virus you need to go to Norbiesworld....This is the link to his site, he will help you fix this......;)

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html

austriandragon March 6th, 2006 09:38 AM

Quote:

Originally posted by wondering why
If your having trouble ridding yourself of this virus you need to go to Norbiesworld....This is the link to his site, he will help you fix this......;)

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html

Thanks! I'll try it and tell you, if everything is alright!!! :-))))))

wondering why March 6th, 2006 03:26 PM

Cool, please do let us know of the outcome as it will help others...;)

Furiouspanda March 14th, 2006 07:20 AM

CRACKED IT!
 
Right, thanks to lots of people here, AVG, jeremy wilkes and sgtbadgerman i have finally figured it all out... :D

The Signs

There are three main things to look for if you think you may have the virus.
1) Limewire constantly keeps opening, and if you un-install it it still tries (and comes up with an error
2) Ctrl-Alt-Delete will not work. This is so the virus is not seen eatingall the cpu :mad:
3) In c/Documents and Settings/main user there will be a folder called complete or uploads or something of the sort. Its a hidden file, so make sure you have hidden files on and system filen on aswell. In complete will be a load of zip files, usually with porn names. DO NOT BE FOOLED! Each one is the virus, and each folder is uploaded to limewire, so more people get it. This is why limewire keeps opening!

The Virus

****** this thing is smart! It cannot be detected by any antivirus (that i know of) and can take over programs. (it took over my previous antivirus!! :( ) It also takes up all your CPU, so if your comp is running slowly, check the signs. Its also extremely good at hiding ;).

How to get rid of the bugger!

Right, this is the hard part.

1) Check all the signs
2) If you know you have the virus, uninstall limewire, this is the first place it hides.
3) Delete .limewire This is in c/Documants and Settings/Main User
4) Do a file find for limewire, delete everything.

5) Now limewire has gone, you can start getting rid of the virus. First, see if you can get into task manager a different way. Sometimes you can, sometimes you can't. To see, go to c/windows/system 32/taskman.exe If you cant open task manager this way, it will probably come up witht eh program is in use. You will need to make a shortcut to task manager on your desktop, re-start your PC and click it straight away.

6) If you can get into task manager, go to processes and double click CPU. Something will be using close to 100%. Write down what it is. It is most likely to be ms movies or winupdates. again, DO NOT BE FOOLED! This is the virus hiding under a windows program!. If the virus is not one of the two, do a file find for what it is. DELETE EVERYTHING that is suspicious. It may have taken over some programs (it did with my antivirus, i had to delete it)

7) Now, if you did or didnt find what the virus is named, turn your computer off and run it in safe mode. (push f8 at startup and select safe mode). If you get the option to cancel loading something using esc, do so. Booting in safe mode may take a while...

8) Go to c/program files and look for winupdates, or ms movies. It'll be hidden. If not, look for what you found in taskmanager. Delete this file, then go and delete complete or uploads. re-start the PC and check the signs. If none appear, :D. However, if they do appear, i'm afraid i cant help.... :(


I hope that this helps. If you have had the virus for a while, it may be slightly harder to get rid of the whole virus. Just keep looking through your system. Filefind is a wonderful tool ;)

GOOD LUCK

FuriousPanda

musicvirtuoso June 18th, 2006 12:31 AM

hey

i'm having the same problem than nigel. can't find task manager exe file. didn't find taskmgr.exe but taskman.exe, is it the same thing ? help fast

musicvirtuoso June 18th, 2006 12:52 AM

not working
 
hey, can't seem to launch the task manager exe even after the copy-paste process.When i double-click it, it just loads for like half a second and nothing happens. what should i do ? i'm doing this with the taskman.exe... aren't taskman.exe and taskmgr.exe the same thing ?Am i using the correct file ? really need help fast. thanks

musicvirtuoso June 18th, 2006 12:55 AM

oh...and i tried restarting. nothing changes. still the same crap

birdy June 18th, 2006 01:01 AM

Are you having the problem with LW popping up all the time too? My best advice would be to go to Norbiesworld (click on link below). He sees this problem a lot & will be able to help you, it's all free. If you go to his site & register, follow the directions for free computer help. Download Hijackthis & post the log in the Viruses, Trojans, Spyware section of his forum.
Norbiesworld


All times are GMT -7. The time now is 03:01 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.