Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   General Windows Support (https://www.gnutellaforums.com/general-windows-support/)
-   -   One simple question. (https://www.gnutellaforums.com/general-windows-support/6767-one-simple-question.html)

Trademark95 December 29th, 2001 04:25 PM

One simple question.
 
Why in the heck (keeping it G) did LimeWire give me a Trojan Horse? I wonder if the LimeWire people have ever heard of dlder.exe or a fake explorer.exe located in C:\winodws\explorer\explorer.exe. How stupid can they be to release a program with a Trojan! I almost reinstalled Windows over this! For those of you using 2.0.2 I would highly recommend you virus scan your computer with and updated scanner and uninstall 2.0.2. As far as I know previous versions do not contain this Trojan. I really hope I get an answer from someone at LimeWire.

phantome December 29th, 2001 07:57 PM

I was wondering where those came from I am useing norton anti-virus and it can't delete the explorer file or the dlder file any idea how to get rid of them?

Trademark95 December 29th, 2001 09:29 PM

The first thing you have to do iis uninstall limewire and delete its folder. Then run norton and look at where the infected files are stored. Then manually delete them

phantome December 30th, 2001 10:00 AM

thanx that worked no more lime for me thank you very much.

Gnucleus all the way! :D

Unregistered December 30th, 2001 12:54 PM

Trojan
 
dlder is a trojan that allow a cracker to gain access to your system.

There is a lengthy discussion about it in the Bearshare Beta forums, since this trojan sliped in.


http://bearshare.net/forum/showthrea...&threadid=8252

Trademark95 December 30th, 2001 10:25 PM

FROM WHAT I GAN GATHER DOING THIS WILL COMPLETELY REMOVE THE TROJAN

THERE IS ABSOLUTELY NO GUARANTEE THAT THIS WILL WORK OR THAT IT WON’T DAMEAGE YOU SYSTEM

DO THIS AT YOUR OWN RISK AND BE SHURE TO FOLLOW MY INSTRUCTIONS VERY CAREFULLY
---------------------------

IF YOU HAVE

- Bearshare 2.4.0 Beta 7
- LimeWire 2.02
- Kazaa (unspecified versions)
- Grokster 1.33
- Net2Phone (unspecified versions)

UNINSTALL THEM AND DELETE THE INSTALLATION FILE AND THEIR FOLDER ON YOUR HARD DRIVE

---------------------------

OPEN ANY FOLDER AND GOTO "TOOLS > FOLDER OPTIONS > VIEW" AND CHECK “SHOW HIDDEN FILES AND FOLDERS”

---------------------------

DELETE (IF ANY OF THE FILES ARE INACCESABLE YOU WILL HAVE TO DELETE THEM IN MS-DOS MODE)

(FOLDER) C:\PROGRAM FILES\CLICKTILLUWIN
C:\WINDOWS\START MENU\PROGRAMS\CLICKTILLUWIN\CLICKTILLUWIN.LNK
C:\WINDOWS\DESKTOP\CLICKTILLUWIN.LNK
C:\WINDOWS\DLDER.EXE
(FOLDER NOT EXECUTABLE) C:\WINDOWS\EXPLORER\

---------------------------

GO TO “START > RUN”

TYPE "REGEDIT" WITHOUT QUOTES

PRESS [ENTER]

GOTO
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS \CURRENT VERSION \RUN

DELETE THE KEY
DLDER = "%WINDOWS%\EXPLORER\EXPLORER.EXE"

crohrs December 31st, 2001 02:56 PM

See http://www.gnutellaforums.com/showth...1&pagenumber=2


All times are GMT -7. The time now is 03:23 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.