Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #31 (permalink)  
Old November 26th, 2005
Apprentice
 
Join Date: November 23rd, 2005
Location: Swindon, England
Posts: 5
BishopNash is flying high
Default

no problem Gramps!

How are u for socks this Christmas? LOL

Glad that cleared things up!


Regards
The Bishop
Reply With Quote
  #32 (permalink)  
Old March 5th, 2006
Novicius
 
Join Date: March 5th, 2006
Posts: 2
austriandragon is flying high
Default Re: Worm.Win32.VB.an or Zodiak

Quote:
Originally posted by kmag
[Newly added]
It looks like this is called the "AN Worm" or the "Zodiak Worm".

I finally got my hands on a copy of this malware. I tested it against free trial versons of Norton AV and Kaspersky AV (and updated the virus definitions for both). Kasperky detects it as Worm.Win32.VB.an. Norton misses it.

There are two free trial versions of Kaspersky Antivirus on download.com

http://www.download.com/3120-20_4-0.html?qt=kaspersky

It's late. Let everyone know

[End of new stuff]


If your antivirus software had detected this virus, it probably would have moved the virus files (winupdate) to your quarantine folder and they wouldn't have been there when you tried the manual removal steps above. However, I'm not familiar with the specifics of AVAST.

AVAST's own website has a list of viruses, but it doesn't list anything named "Adware", so my guess is that it is detecting some kind of adware program (popup generator) and quarantining that. If I had to make a guess, I would guess that AVAST added virus definitions to make it's antivirus program think that various adware programs are viruses, and remove the adware just like it removes viruses. However, I really don't know enough about AVAST to know what it has found based on your description. Unfortunately, different anti-virus vendors often use different names for the same virus.

In any case, if your quarantine folder doesn't contain any winupdates files, my best guess is that AVAST caught some other nasty thing on your computer.
Hi!
I installed LimeWire last week and had the same problem as you: LW opened again and again although I closed it. I tried to follow your steps to delete "winupdates". But it won't work because I couldn't find "C:\windows\prefetch". Maybe it is because I have Windows ME. Please help me!
Reply With Quote
  #33 (permalink)  
Old March 6th, 2006
wondering why's Avatar
You caught my eye
 
Join Date: September 11th, 2005
Location: Brisbane, Australia
Posts: 6,677
wondering why is just really nice
Default

If your having trouble ridding yourself of this virus you need to go to Norbiesworld....This is the link to his site, he will help you fix this......

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html
Reply With Quote
  #34 (permalink)  
Old March 6th, 2006
Novicius
 
Join Date: March 5th, 2006
Posts: 2
austriandragon is flying high
Default

Quote:
Originally posted by wondering why
If your having trouble ridding yourself of this virus you need to go to Norbiesworld....This is the link to his site, he will help you fix this......

http://www.norbiesworld.co.uk/Forums...ic/t=1295.html
Thanks! I'll try it and tell you, if everything is alright!!! :-))))))
Reply With Quote
  #35 (permalink)  
Old March 6th, 2006
wondering why's Avatar
You caught my eye
 
Join Date: September 11th, 2005
Location: Brisbane, Australia
Posts: 6,677
wondering why is just really nice
Default

Cool, please do let us know of the outcome as it will help others...
Reply With Quote
  #36 (permalink)  
Old March 14th, 2006
Novicius
 
Join Date: November 24th, 2005
Posts: 4
Furiouspanda is flying high
Exclamation CRACKED IT!

Right, thanks to lots of people here, AVG, jeremy wilkes and sgtbadgerman i have finally figured it all out...

The Signs

There are three main things to look for if you think you may have the virus.
1) Limewire constantly keeps opening, and if you un-install it it still tries (and comes up with an error
2) Ctrl-Alt-Delete will not work. This is so the virus is not seen eatingall the cpu
3) In c/Documents and Settings/main user there will be a folder called complete or uploads or something of the sort. Its a hidden file, so make sure you have hidden files on and system filen on aswell. In complete will be a load of zip files, usually with porn names. DO NOT BE FOOLED! Each one is the virus, and each folder is uploaded to limewire, so more people get it. This is why limewire keeps opening!

The Virus

****** this thing is smart! It cannot be detected by any antivirus (that i know of) and can take over programs. (it took over my previous antivirus!! ) It also takes up all your CPU, so if your comp is running slowly, check the signs. Its also extremely good at hiding .

How to get rid of the bugger!

Right, this is the hard part.

1) Check all the signs
2) If you know you have the virus, uninstall limewire, this is the first place it hides.
3) Delete .limewire This is in c/Documants and Settings/Main User
4) Do a file find for limewire, delete everything.

5) Now limewire has gone, you can start getting rid of the virus. First, see if you can get into task manager a different way. Sometimes you can, sometimes you can't. To see, go to c/windows/system 32/taskman.exe If you cant open task manager this way, it will probably come up witht eh program is in use. You will need to make a shortcut to task manager on your desktop, re-start your PC and click it straight away.

6) If you can get into task manager, go to processes and double click CPU. Something will be using close to 100%. Write down what it is. It is most likely to be ms movies or winupdates. again, DO NOT BE FOOLED! This is the virus hiding under a windows program!. If the virus is not one of the two, do a file find for what it is. DELETE EVERYTHING that is suspicious. It may have taken over some programs (it did with my antivirus, i had to delete it)

7) Now, if you did or didnt find what the virus is named, turn your computer off and run it in safe mode. (push f8 at startup and select safe mode). If you get the option to cancel loading something using esc, do so. Booting in safe mode may take a while...

8) Go to c/program files and look for winupdates, or ms movies. It'll be hidden. If not, look for what you found in taskmanager. Delete this file, then go and delete complete or uploads. re-start the PC and check the signs. If none appear, . However, if they do appear, i'm afraid i cant help....


I hope that this helps. If you have had the virus for a while, it may be slightly harder to get rid of the whole virus. Just keep looking through your system. Filefind is a wonderful tool

GOOD LUCK

FuriousPanda
Reply With Quote
  #37 (permalink)  
Old June 18th, 2006
Apprentice
 
Join Date: June 17th, 2006
Posts: 5
musicvirtuoso is flying high
Default

hey

i'm having the same problem than nigel. can't find task manager exe file. didn't find taskmgr.exe but taskman.exe, is it the same thing ? help fast
Reply With Quote
  #38 (permalink)  
Old June 18th, 2006
Apprentice
 
Join Date: June 17th, 2006
Posts: 5
musicvirtuoso is flying high
Default not working

hey, can't seem to launch the task manager exe even after the copy-paste process.When i double-click it, it just loads for like half a second and nothing happens. what should i do ? i'm doing this with the taskman.exe... aren't taskman.exe and taskmgr.exe the same thing ?Am i using the correct file ? really need help fast. thanks
Reply With Quote
  #39 (permalink)  
Old June 18th, 2006
Apprentice
 
Join Date: June 17th, 2006
Posts: 5
musicvirtuoso is flying high
Default

oh...and i tried restarting. nothing changes. still the same crap
Reply With Quote
  #40 (permalink)  
Old June 18th, 2006
birdy's Avatar
Airhead
 
Join Date: October 18th, 2004
Location: Perth, Australia
Posts: 901
birdy has a distinguished reputationbirdy has a distinguished reputation
Default

Are you having the problem with LW popping up all the time too? My best advice would be to go to Norbiesworld (click on link below). He sees this problem a lot & will be able to help you, it's all free. If you go to his site & register, follow the directions for free computer help. Download Hijackthis & post the log in the Viruses, Trojans, Spyware section of his forum.
Norbiesworld
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


LinkBacks (?)
LinkBack to this Thread: https://www.gnutellaforums.com/general-windows-support/39468-limewire-opening-startup.html
Posted By For Type Date
Closing Limewire... - Peer to peer This thread Refback August 16th, 2010 11:59 AM

Similar Threads
Thread Thread Starter Forum Replies Last Post
LimeWire continually Popping up every few seconds & also Opening at System Startup Lord of the Rings Connection Problems 0 November 14th, 2005 07:34 AM
Limewire startup e.wynne General Windows Support 1 July 26th, 2005 03:38 AM
Problem opening Limewire - Crash on startup: Fatal Error Lord of the Rings Windows 0 June 26th, 2005 04:44 AM
Problem: Opening at System Startup & continually popping up when closed roofdrop General Windows Support 2 June 25th, 2005 07:44 PM
LimeWire continually Popping up & also Opening at System Startup Lord of the Rings General Windows Support 1 June 21st, 2005 10:56 AM


All times are GMT -7. The time now is 12:15 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.