Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Search Today's Posts Mark Forums Read

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Welcome To Gnutella Forums

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content, fun aspects such as the image caption contest and play in the arcade, and access many other special features after your registration and email confirmation. Registration is fast, simple and absolutely free so please, join our community today! (click here) (Note: we use Yandex mail server so make sure yandex is not on your email filter or blocklist.)

If you have any problems with the Gnutella Forum registration process or your Gnutella Forum account login, please contact us (this is not for program use questions.) Your email address must be legitimate and verified before becoming a full member of the forums. Please be sure to disable any spam filters you may have for our website, so that email messages can reach you.
Note: Any other issue with registration, etc., send a Personal Message (PM) to one of the active Administrators: Lord of the Rings or Birdy.

Once registered but before posting, members MUST READ the FORUM RULES (click here) and members should include System details - help us to help you (click on blue link) in their posts if their problem relates to using the program. Whilst forum helpers are happy to help where they can, without these system details your post might be ignored. And wise to read How to create a New Thread

Thank you

If you are a Spammer click here.
This is not a business advertising forum, all member profiles with business advertising will be banned, all their posts removed. Spamming is illegal in many countries of the world. Guests and search engines cannot view member profiles.



           Deutsch?              Español?                  Français?                   Nederlands?
   Hilfe in Deutsch,   Ayuda en español,   Aide en français et LimeWire en françaisHulp in het Nederlands

Forum Rules

Support Forums

Before you post to one of the specific Client Help and Support Conferences in Gnutella Client Forums please look through other threads and Stickies that may answer your questions. Most problems are not new. The Search function is most useful. Also the red Stickies have answers to the most commonly asked questions. (over 90 percent).
If your problem is not resolved by a search of the forums, please take the next step and post in the appropriate forum. There are many members who will be glad to help.
If you are new to the world of file sharing please do not be shy! Everyone was ‘new’ when they first started.

When posting, please include details for:
Your Operating System ....... Your version of your Gnutella Client (* this is important for helping solve problems) ....... Your Internet connection (56K, Cable, DSL) ....... The exact error message, if one pops up
Any other relevant information that you think may help ....... Try to make your post descriptive, specific, and clear so members can quickly and efficiently help you. To aid helpers in solving download/upload problems, LimeWire and Frostwire users must specify whether they are downloading a torrent file or a file from the Gnutella network.
Members need to supply these details >>> System details - help us to help you (click on blue link)


Moderators

There are senior members on the forums who serve as Moderators. These volunteers keep the board organized and moving.
Moderators are authorized to: (in order of increasing severity)
Move posts to the correct forums. Many times, members post in the wrong forum. These off-topic posts may impede the normal operation of the forum.
Edit posts. Moderators will edit posts that are offensive or break any of the House Rules.
Delete posts. Posts that cannot be edited to comply with the House Rules will be deleted.
Restrict members. This is one of the last punishments before a member is banned. Restrictions may include placing all new posts in a moderation queue or temporarily banning the offender.
Ban members. The most severe punishment. Three or more moderators or administrators must agree to the ban for this action to occur. Banning is reserved for very severe offenses and members who, after many warnings, fail to comply with the House Rules. Banning is permanent. Bans cannot be removed by the moderators and probably won't be removed by the administration.


The Rules

1. Warez, copyright violation, or any other illegal activity may NOT be linked or expressed in any form. Topics discussing techniques for violating these laws and messages containing locations of web sites or other servers hosting illegal content will be silently removed. Multiple offenses will result in consequences. File names are not required to discuss your issues. If filenames are copyright then do not belong on these forums & will be edited out or post removed. Picture sample attachments in posts must not include copyright infringement.

2. Spamming and excessive advertising will not be tolerated. Commercial advertising is not allowed in any form, including using in signatures.

3. There will be no excessive use of profanity in any forum.

4. There will be no racial, ethnic, or gender based insults, or any other personal attacks.

5. Pictures may be attached to posts and signatures if they are not sexually explicit or offensive. Picture sample attachments in posts must not include copyright infringement.

6. Remember to post in the correct forum. Take your time to look at other threads and see where your post will go. If your post is placed in the wrong forum it will be moved by a moderator. There are specific Gnutella Client sections for LimeWire, Phex, FrostWire, BearShare, Gnucleus, Morpheus, and many more. Please choose the correct section for your problem.

7. If you see a post in the wrong forum or in violation of the House Rules, please contact a moderator via Private Message or the "Report this post to a moderator" link at the bottom of every post. Please do not respond directly to the member - a moderator will do what is required.

8. Any impersonation of a forum member in any mode of communication is strictly prohibited and will result in banning.

9. Multiple copies of the same post will not be tolerated. Post your question, comment, or complaint only once. There is no need to express yourself more than once. Duplicate posts will be deleted with little or no warning. Keep in mind a forum censor may temporarily automatically hold up your post, if you do not see your post, do not post again, it will be dealt with by a moderator within a reasonable time. Authors of multiple copies of same post may be dealt with by moderators within their discrete judgment at the time which may result in warning or infraction points, depending on severity as adjudged by the moderators online.

10. Posts should have descriptive topics. Vague titles such as "Help!", "Why?", and the like may not get enough attention to the contents.

11. Do not divulge anyone's personal information in the forum, not even your own. This includes e-mail addresses, IP addresses, age, house address, and any other distinguishing information. Don´t use eMail addresses in your nick. Reiterating, do not post your email address in posts. This is for your own protection.

12. Signatures may be used as long as they are not offensive or sexually explicit or used for commercial advertising. Commercial weblinks cannot be used under any circumstances and will result in an immediate ban.

13. Dual accounts are not allowed. Cannot explain this more simply. Attempts to set up dual accounts will most likely result in a banning of all forum accounts.

14. Video links may only be posted after you have a tally of two forum posts. Video link posting with less than a 2 post tally are considered as spam. Video link posting with less than a 2 post tally are considered as spam.

15. Failure to show that you have read the forum rules may result in forum rules breach infraction points or warnings awarded against you which may later total up to an automatic temporary or permanent ban. Supplying system details is a prerequisite in most cases, particularly with connection or installation issues.

Violation of any of these rules will bring consequences, determined on a case-by-case basis.


Thank You! Thanks for taking the time to read these forum guidelines. We hope your visit is helpful and mutually beneficial to the entire community.


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old June 19th, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default How to get limewire to quit popping up every few seconds

1) Create a system restore point
Start>Allprograms>accessories>system tools>System restore
Follow on screen instructions.

2) Go to the following directory and delete any file with winupdates in the name. Do not be fooled this is not the actual windows update stuff its a virus. i know that might be hard for some of you to believe but i had it and ive got more than one virus scan which none picked this up.

c:\windows\prefetch

3)Open My Computer. Select Tools from the menu, followed by Folder Options. Click on the View tab. Make sure that there is a check mark next to the following items:

Display the Contents of System Folders
Show Hidden Files and Folder

4)Now, make sure there are no checkmarks beside the following:
Hide protected Operating System Files.

5) Uninstall Limewire. You can reinstall it at the end of these steps.

6) Disable System Restore in Windows. This can be done by right clicking on My Computer, selecting Properties, and then clicking on the System Restore tab. Then check the box Turn Off System Restore. Hit Apply, and then OK. If you are prompted to restart Windows, do so.

7) Now we need to fool the virus into allowing us to open the Task Manager. This can be done by copying the Task Manager executable file from the Windows directory. To do this, go to c:\windows\system32, select the file taskmgr.exe, right click on it, and select Copy. Go to the desktop, and click on an empty part of the desktop. Then right click on the desktop, and select Paste.

8) Double click on the taskmgr.exe file on your desktop. This should open the Task Manager. Click on the Performance tab. If you are in fact infected with a virus, you will likely (although not necessarily) see close to 100% CPU usage!! Now click on the Processes tab, followed by clicking twice on the CPU column header. What this does is order the files running on your computer based on the amount of CPU resources they are consuming in real time. If there is a process, other than System Idle Process, that is consuming close to 100% of the CPU, then it is this process (or file) that is infecting your computer. For me, and likely for a lot of you, that file will be winupdates.exe. Don't be tricked. This is not a Microsoft program. It's a virus masking itself as a legitimate file. Please remember the exact name of this process, because you will need it in a later step.

9) Click on this process to highlight it, then click the button End Process. A warning prompt should pop up. Click on Yes.

10) Now that this process is killed, we need to remove any references to it from the Registry. Once again, because this virus is blocking us from opening the Registry Editor, we need to trick the virus by copying the file to the desktop. Follow the same steps as in number 3, except this time, copy the following two files from their respective directories, and paste them on the desktop.

c:\windows\regedit.exe
c:\windows\system32\cmd.exe

11) Open regedit from the desktop. In the left window, click on My Computer so that it is highlighted. Now select Edit from the menu, followed by Find. In the Find box, type the name of the process that you ended from the Task Manager. If you recall, mine was winupdates. Do not include the .exe, just winupdates. Then click Find.

12) For the item that it found in the right window, click it to highlight it if it isn't highlighted already, and then right click on it, and select Delete. If a prompt pops up, select Yes or OK to confirm the delete.

13) Now, hit the F3 button once. This will find the next reference to that bad file. Follow step 8 again to delete the reference. Repeat steps 9 and 8 until the editor indicates that there are no more references to this file. Then exit the editor.

14) click on cmd.exe which you copied to the desktop. It will open the Command Prompt (which looks like DOS). Type the following commands in order, and hit Enter after each line:

cd c:\
cd program files
rd /s /q winupdates

16) make sure to go back into the System Properties by right clicking on My Computer, and unchecking the Turn Off System Restore box under the System Restore tab.

17) Now restart your computer. Reinstall Limewire

18) create a restore point after you have removed the virus. Then delete all but the latest resore points. Heres how.

To delete all but the last restore point you made
1) Right click on C:/ in My Computer
2) Click Properties
3) Click Disk Cleanup
4) Click Tab <More Options>
5) Under System Restore Click <Clean up...>

by the way, deleting restore points is OPTIONAL
and did because they will actually contain the virus file and if you restore to one of the infected points, Congradulations you're reinfected.

I think that pretty well covers it. if you find any mistakes please post here and i will correct my error. i have read through this like 10 times already though so i know none of the errors will be computer fatal errors. heck i did it on my own following these instructions which are actually from a guy in another post here. i copy pasted. Thanks Bobby Naini. youre a genius and i give all credit to him. I take none for my own. Bye and good luck.
Reply With Quote
  #2 (permalink)  
Old June 21st, 2005
Enthusiast
 
Join Date: June 21st, 2005
Posts: 49
kmag is flying high
Default Please send a copy to ant-virus labs to help stop this virus

[New Info]
This is malware has been identified as
Worm.Win32.VB.an, the "AN Worm", sometimes called the "Zodiak Worm".

I was able to obtain a sample of this malware. I got free trial versions of both Norton Anti-virus and Kaspersky Anti-virus from Downoad.com.

Norton's 6/22/2005 virus definition library misses this malware.

Kaspersky catches it and quarantines it.

http://www.download.com/3120-20_4-0.html?qt=kaspersky

Let us all know if you find any other anti-virus scanners that catch this worm. It might be a new variant, because Norton's website claims they've been able to catch this worm since October 2003.

[End of New Info]

I sent an email to Kaspersky Labs antivirus yesterday about this virus and got an email back from one of their virus analysts. However, I haven't been infected and so I wasn't able to provide them with a sample of the virus.

If you'd be so kind as to help prevent others form getting this virus, please make a password-protected zip (or rar) file containing any viral files you are about to delete. The password should be "infected" and it should be mailed to NewVirus@kaspersky.com, with a subject of KLAB-571146.

It's my understanding that the major anti-virus labs have informal agreements about sharing new viruses with eachother.

If you're extra motivated to help stop this virus, TrendMicro anti-virus has a web submission form at http://subwiz.trendmicro.com/SubWiz/...sp?opgWizard=7 . Presumably TrendMicro wants the winupdates file instead of the password protected zip file.

Unfortunately, it looks like Symantec/Norton Anti-Virus requires you to use Norton Anti-Virus to send in samples instead of using plain old email. If you have Norton Anti-virus, please by all means use Norton Anti-virus to send Symantec/Norton a copy of winupdates.

McAfee Anti-virus's website gives me the impression that there's no way for the average person to send them samples of suspected viruses.

Last edited by kmag; June 24th, 2005 at 09:12 PM.
Reply With Quote
  #3 (permalink)  
Old June 21st, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Unhappy Sorry

If there is anyone out there who hasnt gotten rid of this virus yet, please be so kind as to send the files to this guys people. I cant as i already got rid of it. If i do ever get reinfected with it i will send them out but i cant. To do this, instead of deleting all of the files as stated above simply copy them into a new folder on your desktop and THEN delete the originals. I dont know if you can do that with the registry stuff though. Im sorry i had already gotten rid of the stuff but it ate up my printer stuff and everything. I wish you had said something sooner. I will be glad to send these instructions though if that helps. Let me know if it will. I dont have Norton as i hate it for crashing my dads system and putting me through h-e double hockey sticks and back. It took me 40 hours of recovery work to get that system back and it was right after i got norton on it. Im sorry i cant help other users that like it though. I have Etrust. I know nothing about sending virus info to them though. If oyu find anything out please feel free to post again, pm, or even email me at my username (kc0rkx_finch) at yahoo.com SORRY i cant be of anymore help!!
Reply With Quote
  #4 (permalink)  
Old June 21st, 2005
Novicius
 
Join Date: June 21st, 2005
Posts: 3
Metal123 is flying high
Thumbs up OMG YEAH!

I got rid of it! it was annoying me to HELL!
no taskmanager was driving me NUTZ, plus all the cpu usage and stupid popups. and the fact that it was so hard to make it f*** off =) THank you so mutch for helping
Reply With Quote
  #5 (permalink)  
Old June 21st, 2005
Novicius
 
Join Date: June 21st, 2005
Posts: 4
tattoowayne is flying high
Unhappy 141414

ok so if i have win2000 what do i do about the restore point and the prefetch folder. they dont exist on 2k?
Reply With Quote
  #6 (permalink)  
Old June 21st, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

im glad these instructions helped somebody. I will try to get some 2k info soon and let you know. same for win 98 users I might not be able to do win 95 but ill try
Reply With Quote
  #7 (permalink)  
Old June 22nd, 2005
Novicius
 
Join Date: June 22nd, 2005
Posts: 1
HeyJay is flying high
Default

At step 2 , c:\windows\prefetch , I do not have any files with winupdates in the name.

At step 7 , c:\windows\system32 , I do not have any files with .exe in the name.

Thank you for your continued support.
Reply With Quote
  #8 (permalink)  
Old June 22nd, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

the taskmgr file will not have .exe at the end of it on win xp. it will just be called taskmgr. If you doi not have any of those files in the prefetch folder the the virus may not have progressed as far as it had on mine and bobby naini's systems. You should be okay there


Im still trying to find a win 2k pc and have not had a chance to get on one yet. I will try to find one soon and reply.
Reply With Quote
  #9 (permalink)  
Old June 22nd, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

Tattoowayne, For your sake i hope to god im right on this. Is windows 2k generally the same format as win98?? If it is i have a win98 pc that i could use but the only 2k pc i can find is at my office and its 2kpro. Plus if i start screwin around on it and f*** somethin up then im out on my @$$. If 2k is like win98 ill get some info tommorrow. For those who want to send the viral info to the people mentioned above by anohter party the instructions are coming soon. I am having a little trouble re-configuring the entire instruction sheet but im working on it. Thank god i have these two weeks off from work so i can "work" helping you guys out. Its kinda fun though. Makes me regret not going into a computer type job. I guess i could switch though im still young ( at heart). Also please post your system specs for me. I have an odd idea but it just might work if your system is "up to snuff enough"

Last edited by kc0rkx_finch; June 22nd, 2005 at 12:43 PM.
Reply With Quote
  #10 (permalink)  
Old June 22nd, 2005
Enthusiast
 
Join Date: June 17th, 2005
Posts: 49
kc0rkx_finch is flying high
Default

also please see the poll on this forum and vote. Its very important and could help us convince all of the antivirus folks to get an "antidote" out in their software. Please choose two.

http://www.gnutellaforums.com/showth...threadid=39696
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
LimeWire continually Popping up every few seconds & also Opening at System Startup Lord of the Rings Connection Problems 0 November 14th, 2005 07:34 AM
Limewire won't keep popping up cooljc General Windows Support 1 July 10th, 2005 12:32 PM
thanks man i love u - re: How to get Limewire to quit popping up every few seconds ! ben148 General Windows Support 2 June 20th, 2005 08:48 AM
Limewire won't quit in OS X without a force quit HELP General Mac OSX Support 8 September 25th, 2002 06:49 PM
BUG: pressing 'quit' while main window is open doesn't quit qtella verwilst Qtella (Linux/Unix) 4 April 7th, 2002 09:26 AM


All times are GMT -7. The time now is 05:56 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.