Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   General Windows Support (https://www.gnutellaforums.com/general-windows-support/)
-   -   Why hasn't LimeWire pulled their program until they fix the Trojan problem ??? (https://www.gnutellaforums.com/general-windows-support/6781-why-hasnt-limewire-pulled-their-program-until-they-fix-trojan-problem.html)

VTOLfreak January 1st, 2002 06:03 PM

OK , it's up .
After I made some alterations .

You should not spread limewire.props and the .dll files , it will dynamicly create them .
Besides limewire.props is diffrerent for every configuration .
I cleared out the junk we don't need .

Take a look : http://users.pandora.be/karel.boonen...Wire_2.0.3.zip

TruStarwarrior January 1st, 2002 07:43 PM

Thank you very much VTOLfreak.
I really appreciate your willingness to host.
:-)
LimeWire comes with the props file and *.dll files by default, so I prefer no to remove them. It also doesn't have a shortcut launcher anymore. But I've made a note of the changes on the download page.

Thanks again!
:D

TruStarwarrior January 1st, 2002 07:49 PM

I will leave out the .props file in the next release so that LimeWire configures itself according to the user's need.
:-)

VTOLfreak January 1st, 2002 09:11 PM

You don't need to keep the .dll files in the zip either !

What do you think a .jar file is ?

jar = Java ARchive

The dll's are already packed inside one of the jar's !

It will automaticly "extract" them if it finds there not there .
So if you keep them in the zip your packing 2 copies of the same file . :D

You don't need the launcher or shortcut anymore .
Just starting the RunLime.jar file will start LimeWire like normal .

You know how the latest Java runtime packages register the .jar format ?
The description they give to the .jar format is "Executable Jar File"
Wouldn't that suggest that you can simply doubleclick the file to start it if you have a recent Java runtime installed ?
With recent I mean Java runtime +1.3 .

PS: Where is the download page I'm hosting for ?

Morgwen January 2nd, 2002 03:35 PM

Quote:

Originally posted by crohrs
This software was part of clicktilluwin, which we bundled with LimeWire. Apparently Norton Antivirus started to consider it a "virus" on December 27th. I wouldn't call it a true virus since it doesn't propogate itself or inflict damage. But it is damn annoying and we would have never knowingly included it. We apologize that we couldn't respond faster.

Have you investigated who is responsible?

There are some other clients with the same problem... all are using ads/spyware...

so there must be a company (or companies) which is not honest... find it...

Crohrs you should investigate better which kind of software you bundle... nobody trust them and now you see why...

This is no offense! But if you and the other developers don´t start to check the bundled software, "all" P2P clients which are using this software are a security risk...

Morgwen

Unregistered January 2nd, 2002 05:05 PM

Hi Morgwen. I think you have some good points. We try to investigate all our bundled software carefully. But these vendors don't include source code, so at some point we have to just trust their word. I was under the impression that clicktilluwin just installed an icon. Other vendors--BearShare, Kazaa, and Grokster--were burned by this as well.

In the future, we hope to stick with a small number of trusted vendors. We are also becoming increasingly vigilant. For example, when LimeWire users reported seeing Aureate on their systems we investigated carefully. In this case it turned out that it was a false alarm caused by the cache of the Cydoor ad delivery system. We would have NEVER installed Aureate.

TruStarwarrior January 2nd, 2002 05:25 PM

Quote:

Originally posted by VTOLfreak
You don't need to keep the .dll files in the zip either !

What do you think a .jar file is ?

jar = Java ARchive

The dll's are already packed inside one of the jar's !

It will automaticly "extract" them if it finds there not there .
So if you keep them in the zip your packing 2 copies of the same file . :D

You don't need the launcher or shortcut anymore .
Just starting the RunLime.jar file will start LimeWire like normal .

You know how the latest Java runtime packages register the .jar format ?
The description they give to the .jar format is "Executable Jar File"
Wouldn't that suggest that you can simply doubleclick the file to start it if you have a recent Java runtime installed ?
With recent I mean Java runtime +1.3 .

PS: Where is the download page I'm hosting for ?

Yes, the newer version of Clean LimeWire (2.0.4) does not keep these dlls or props in there. But I must correct you on something. A .jar file is an archive. Similar to a zip, but different. They are not executable in the sense that .exe files are. Did you try launching it in the manner you are describing? It doesn't work. You have to execute the javaw.exe process and tell it where to look for a java file, and in this case, it's in a jar. This command is used to launch it:
"C:\Program Files\JavaSoft\JRE\1.3.1\bin\javaw.exe" -cp . RunLime
and you have to be running it from the appropriate folder:
"C:\Program Files\LimeWire\1.7c"
CP stands for class (path). Runlime.class is a java file found inside Runlime.jar. So making a shortcut is difficult. Not very simple compared to making a shortcut to a .exe file. Of course, the exact directories are variable (which will be addressed in the next release), and it makes creating an installer a more complicated process than you would think.

:-)

Sincerely,
TruStarWarrior

P.S. The download page is here now:
http://www.geocities.com/burk017/verhist.html

TruStarwarrior January 2nd, 2002 05:33 PM

If you would like to explore the archives yourself, check out WinRAR.
:D

TruStarwarrior January 2nd, 2002 05:45 PM

I can leave the net file out with no problems. You could potentially use it to steer the user to connect to a certain address at startup time, but that's not really necessary.
:-)

ttyl!

Unregistered January 2nd, 2002 08:51 PM

Ok, this is my first post here, and frankly, I don't plan on registering. I just thought I should let you know what all of this looks like to an outsider.

First there is ther trojan problem, which is compounded by the spyware. There is no acknowledgement of either of these two issues on the main page. This looks to the average person that there is something to be hidden. Added to this is that the trojan is still present in the software, and there is no apparent measures being taken. This problem has been publicized on some VERY popular websites. The failure to address this is a MAJOR PR mistake. Where they could have turned this around and gained a favorable reputation, they have decided to bury the issue. All of this, plus the issues in this thread alone, are enough to make anyone question if it's in their best interest to use this software.

To be honest, I can't, in all concience, reccomend this software to anyone anymore. I suggest the moderators, and the company providing this software, work together to solve this.

Unregistered January 2nd, 2002 08:52 PM

It seems I cannot edit my post. I did not intend to post behind a screen of anonymity.

dragonman@capeonramp.com

TruStarwarrior January 2nd, 2002 09:08 PM

Quote:

I suggest the moderators, and the company providing this software, work together to solve this. [/B]
This is an excellent suggestion. Just one problem. It's already failed - on more than one occasion.
:-(

Unregistered January 3rd, 2002 11:07 AM

Clicktilluwin game
 
This program isn't some elaborate trojan program bend on wreaking havoc on the internet, it's just BS ad-ware. If you go to their site http://www.clicktilluwin.com/clickprivacyterms.htm they'll tell you everything about it, and how to remove it. There are much more nefarious programs out there then this. Check out www.cexx.org

Jon

wagoneer1985 at yahoo.com

Unregistered January 3rd, 2002 01:08 PM

Glad to see ya Go.
 
Quote:

Originally posted by TruStarwarrior
There are many, many people who come in here and complain when they can't get the help they want <b>immediately</b>. No one appreciates it when you put people down for what they do in their SPARE TIME, and frankly, I'm not going to take it. No one needs to take it. If one more rude person leaves, the better for all of us. I'm sorry if this offends you. If you want to think me rude, go ahead.
Great! When are you leaving?

Unregistered January 3rd, 2002 03:54 PM

Re: Clicktilluwin game
 
Quote:

Originally posted by Unregistered
This program isn't some elaborate trojan program bend on wreaking havoc on the internet, it's just BS ad-ware.
Jon

wagoneer1985 at yahoo.com

I beg to differ with you Jon that this was a simple as-ware. I suggest you read the newly revised research on the trojan done by F-Secure: http://www.europe.f-secure.com/v-descs/dlder.shtml

This software opens a security hole in your system by downloading and execututing files. What prevents them (clicktouwin) or somebody else to download and execute files from this hole ? This program also reports info about your system. Also they try to trick the user that's it is a valid window file trying to access the internet, by naming itself the name of "Explorer.exe". Pretty sneaky !!

This is far more then a simple ad-ware, but even so, this is ad-ware that LimeWire did not test or tell us that this was going to be installed on our system.

I am glad that LimeWire finally prevented version 2.02 from being download by more people, and posted a warning on their website. But there is more to be done and I don't understand why it has not been done yet. Many people do not have anti-virus, or the current definitions. They need to be provided some kind of fix, either manual or automatic, to remove this trojan. They also need to provide the users more details about this trojan. Many are well known now.

Also, it would be nice for them to provide answers to some of the very valid questions posted in this thread. What haven't they bothered to respond ?

VTOLfreak January 3rd, 2002 04:08 PM

Yes you can run LW by just doubleclicking runlime.jar .
Linking to it won't work but doubleclicking the file directly does launch LW fine .

If it aint supposed to work thatway why does it do om my comp ??

Unregistered January 3rd, 2002 05:01 PM

Bad news
 
Limewire is getting a bad rep on some of the boards I go to, it even made the news in a negative way. I think it'll be awhile before people start trusting this P2P again.

Wired.com
http://www.wired.com/news/privacy/0,1848,49430,00.html

Oh yes, and please get rid of the grumpy moderator trustar, Thanks...

Unregistered January 3rd, 2002 05:17 PM

LimeWire admits bundling is dangerous
 
So according to the Wired article, LimeWire's Bildson says bundling Spyware is dangerous:

"It is hard to monitor the behavior of bundled software over the life of that software," Bildson said. "Changes can be made on the server after the fact that allow the software to become dangerous. We are looking for safer ways to support our free software installations without the dangers that are always presented by third-party bundled software."

So I suggest that until they find a better way to test and prevent spyware from installing without the user's notice, and trojans from infecting the user's system...stop bundling them !!!

Unregistered January 3rd, 2002 05:53 PM

WHAT A JOKE!
 
i just installed this tonight.... thanks for the trojan.... good luck with future releases... you guys are REAL pros...

TruStarwarrior January 3rd, 2002 06:09 PM

Quote:

Originally posted by VTOLfreak
Yes you can run LW by just doubleclicking runlime.jar .
Linking to it won't work but doubleclicking the file directly does launch LW fine .

If it aint supposed to work thatway why does it do om my comp ??

Your have .jar files associated with java, whereas most people do not.

:-)

TruStarwarrior January 3rd, 2002 06:14 PM

Re: Glad to see ya Go.
 
Quote:

Originally posted by Unregistered


Great! When are you leaving?

When I feel like it - and when webcrawling hermits like you register and stop hiding behind the seemilngly anonymous nature of the internet and register.

Unregistered January 3rd, 2002 06:42 PM

Re: Re: Glad to see ya Go.
 
Quote:

Originally posted by TruStarwarrior

When I feel like it - and when webcrawling hermits like you register and stop hiding behind the seemilngly anonymous nature of the internet and register.

Face it, you regret making the obnoxious comment that you made and don't know how to intelligently respond to those who took offense to it. Why not apolgize, admit you're an *** and go on with life?

TruStarwarrior January 3rd, 2002 06:53 PM

If you would care to read this thread before commenting, you would have seen that I already did. Why not think before you speak?

~TruStar~

Unregistered January 3rd, 2002 07:34 PM

Quote:

Originally posted by TruStarwarrior
If you would care to read this thread before commenting, you would have seen that I already did. Why not think before you speak?

~TruStar~

I did. You didn't apalogize. The closest you came was being sorry if you offended anyone or "ruffled feathers." Not very sincere.

Besides, you went back into obnoxious mode with the "webcrawling hermits" comment. You are registered as "TruStarwarrior." How does that make you less anonymous than an unregistered poster? If I registered myself as TruStarfighter would that satisfy you and mean that I am not hiding behind, as you put it, the "anonymous nature of the internet." Give me a break.

TruStarwarrior January 3rd, 2002 07:55 PM

Flaming is fun, but I've had enough...
 
Flaming is fun, but I've had enough...

Shall I quote myself once again? I guess I have to, since you can't paraphrase properly.
Quote:

I haven't been very diplomatic, and so I apologize for all the feathers I've ruffled.
Nuff said.

Yes, registering makes it easier to know who we're talking to. Checking the IPs of every poster named "Unregistered Guest" becomes rather dull.

Yes, I may be in an abnoxious mode. I am the bane of all on this thread. I should be fired because I fought fire with fire. But I will <big><big>stop</big></big>...

I won't be wasting any more of anyone's time here. It's been fun, everyone! Take care!

Greets,

~TruStarWarrior~

P.S. I will not read any retorts you would like to make to this response, so feel free to burn me with whatever fire you've got left.

Unregistered January 4th, 2002 03:03 AM

TruStarwarrior,

Don't worry about that anonymous terrorist. What we have here is a stupid fool (or perhaps several of them) who actually thinks that you represent LimeWire, and that what you, and independent person who does this on his spare time, is supposed to cuddle lamers and trolls. As a representative of a company you don't even work for. HAH!

Take the first post as an example. This board is apparently run by individuals that do this for free, as a service to the community. Yet he thinks that he is entitled to a direct, personal reply from the LimeWire staff. That is just ridiculous! Losing faith in a program based on a PUBLIC FORUM? How stupid can one get?

And then there's idiot who said "Are you trying to ruin your business?" as a response to your initial reply. What business? You are doing this for free... Wow, some people...

And then there's another stupid person who writes:

Quote:

do in their spare time? if theres adware/spyware being installed this is not spare time. this is FOR MONEY.
YES, the moderators do this in their spare time, you IDIOT! They are not employees in the company! Geez, some people...

And:

Quote:

This kind of problem with LimeWire and this kind of attitude from the staff has made LimeWire look very bad !!!
This idiot is talking about YOU, TruStarwarrior. IDIOT, TruStarwarrior DOES NOT REPRESENT LIMEWIRE!

And then, one of the biggest idiots of all:

Quote:

The developer at LimeWire still refuses to answer some valid valid questions posted on this forum. Why has he/she refused to answer ??? What is he/she hiding ???
You ****ing idiot! Just becase the developers DO NOT HAVE THE TIME TO REPLY TO EVERY SINGLE POST IN A FORUM, that does not mean that they are refusing to answer, or that they are hiding something.

Are you ****ing stupid? Do you have a ****ing pea for a brain? You ****ing idiot. Are you so ****ing stupid that you do not understand that perhaps YOUR CONSPIRACY THEORIES ARE ****ING MORONIC?

And the ****ing idiot continues:

Quote:

Why is there options to prevent the install of some spyware, but others are still installed ?
ARE YOU ****ING DENSE? THE POINT IS THAT THE DEVELOPERS OF LIMEWIRE DO NOT WANT TO BUNDLE SPYWARE, AND WANT PEOPLE TO BE GIVEN A ****ING CHOICE WHETHER TO INSTALL THE ADDITIONAL PROGRAMS OR NOT!

GOD DAMMIT YOU PEOPLE ARE STUPID! ****ING IDIOTS! AND YOU IN PARTICULAR!

So, ****ing whining idiots with **** for brains... Quit whining for ****s sake. You are all a bunch of anonymous ****heads who don't even understand what software is all about. You don't understand that open forums with voluntary moderators who do this for free, on their spare time, cannot be connected with the company! IDIOTS!

I, on behalf of everyone with more than half a brain, would like to thank TruStarwarrior for being so calm and reasonable. I also support his first post in this forum a hundred per cent. The first poster was a whining idiot who didn't know what the hell he was talking about. GET A ****ING LIFE!

(Yes, I realize that I am unregistered as well, but I don't usually read/post in this forum, and can't be bothered to register. If you have a problem with that, please **** off. (This was not aimed at TruStarwarrior.))

Unregistered January 4th, 2002 05:33 AM

Quote:

Originally posted by Unregistered
TruStarwarrior,


Take the first post as an example. This board is apparently run by individuals that do this for free, as a service to the community. Yet he thinks that he is entitled to a direct, personal reply from the LimeWire staff. That is just ridiculous! Losing faith in a program based on a PUBLIC FORUM? How stupid can one get?

Wrong...check the id's of some the moderators. 3 out 5 of them work for LimeWire. But even if none of them did, I don't think the first post was aimed directly at all of the moderators. It was aimed at the support people at LimeWire. No this board is not run by LimeWire, but since they have a support link to it on their website, they should monitor it and help their users. I'm not going to bother with the rest of your stupid remarks, I think most people would agree with what I said, and it applies to most of your comments.

Unregistered January 4th, 2002 05:45 AM

Quote:

Originally posted by Unregistered

ARE YOU ****ING DENSE? THE POINT IS THAT THE DEVELOPERS OF LIMEWIRE DO NOT WANT TO BUNDLE SPYWARE, AND WANT PEOPLE TO BE GIVEN A ****ING CHOICE WHETHER TO INSTALL THE ADDITIONAL PROGRAMS OR NOT!


I had to post one other remark. Are YOU dense ? I think the point of the person was trying to make, was that LimeWire has bundled software, but they are not given the choice to opt-out of ALL of them. Why only give the option to opt-out for some of them, and why is the user not warned that other undisclosed spyware or trojans will be installed without a choice !!

Abaris January 5th, 2002 11:43 AM

the limefolks thought that you could opt out of every bundeled software except cydoor. cydoor, however, is explicitly listed in the license agreement (it is even called "LimeWire and Cydoor license agreement). they, too, were deceived by the spyware companies.

they will continue to bundle third party software because they have to. they must pay developers and servers and bandwidth, and they make no direct profit with limewire. how do you think shall they pay the bills? 6 bucks for lime pro is more than fair, if you want to have lime for free, you have to download bonzi buddy.

maybe three moderators are paid by limewire, that doesn't change the fact that this particular unregistered was arguing with trustarwarrior and it was pretty clear that his remarks were aimed at him. he is doing all this in his spare time and it is ignorant to insist on limewire getting rid of him. would one of the unregistereds do his work? they don't have the time to register!

limewire 2.0.4 is out and it seems they have removed the spyware. they do apologize on their website. additionally, Tru is hosting clean limewire which is all you could ask for. so stop complaining and let's get back to constructive posts.

post script: to the unregistered guy who was trying to defend trustarwarrior: not even vinnie uses so many *s in a single post. go and flame elsewhere. perhaps you know who is who on this board, that doesn't mean you are less annoying than others.

Abaris January 5th, 2002 11:51 AM

tru: Jar files are linked to javaw by default and therefore can be executed by a doubleclick. they are however not linked to javaw if you use the JRE 1.3.1 (the one that is installed by limewire). i think that must be a bug, all java versions since 1.2 made jar files executable by doubleclick. if you like, you can manually link them to 'javaw.exe -jar "%1"'.

PS: indeed jar files are zip files. just another extension.

mlledes January 5th, 2002 02:26 PM

Amen!
 
Quote:


limewire 2.0.4 is out and it seems they have removed the spyware. they do apologize on their website. additionally, Tru is hosting clean limewire which is all you could ask for. so stop complaining and let's get back to constructive posts.

<B>Enough said!!!</B> (and very <B>well</B> said, if I may say so...

Unregistered January 5th, 2002 07:01 PM

<b>[Post edited for vulgar stupidity]</b>

Unregistered January 6th, 2002 07:04 PM

I don't think all of this TrueStarwarrior bashing would have started, if it wasn't for his very first two rude posts in this thread. The very first poster in this thread was angry that trojans and spyware were installed on his system, and without any warnings, and this software was still available for download. I think he (and for that matter, all of us) had a right to be angry and post his feelings and concerns. Especially since several people in other earlier threads reported this problem also, but never got a response back from LimeWire. Both LimeWire's website and their version 2.x software has links to this forum for support. That makes this forum their official support site forum. That very first thread was not aimed at TrueStarwarrior, it was aimed at LimeWire. But for some reason, he thought the very first post was a personal attack on him. He decided to be rude and childish and post those first couple of replies. I think that was wrong...especially for a moderator !! Period and end of story. I think if he didn't respond in the way he did, the childish flaming that has gone on between him and other users would have never happened. I personally think that if TrueStarwarrior wants to continue being a moderator, he should not take posts aimed at LimeWire as personal attacks on him, and if he feels the need to respond to a post, he needs to act professionally.

Unregistered January 6th, 2002 07:13 PM

Quote:

Originally posted by Abaris
the limefolks thought that you could opt out of every bundeled software except cydoor. cydoor, however, is explicitly listed in the license agreement (it is even called "LimeWire and Cydoor license agreement). they, too, were deceived by the spyware companies.


The problem would have been easly discovered if they just would have done basic testing on the third-party software they decide to bundle. This problem is their fault for not doing basic tests. Being ignorant to a law, doesn't give you a defense in a court of law. I think the same holds true here. This trojan and spyware problem is equally LimeWire's fault.

Abaris January 7th, 2002 10:52 AM

I totally agree. It definitely was LimeWire's fault. But there's no need to endlessly discuss this point if the whole thing is over and done with. I am positive the limefolks have learned their lesson and that things like that will not happen again in the near future.

trustarwarrior will not return to read in or post on this thread. limewire did apologize. the spyware seems to be out of version 2.0.4. tru hosts clean limewire. it is my opinion that everything that had to be said here has been said and that any further discussion of things is a waste of time.

VTOLfreak January 7th, 2002 12:31 PM

TruStar said something about leaving the forums in a PM he sent me ...

Too bad . :(

Abaris January 7th, 2002 02:22 PM

Damn it! I hope he will think about it again!

Delta476 April 16th, 2006 05:17 AM

How badly infected is Limewire?
 
I'm a really big fan of LimeWire as their Software and Download speeds are superior to anything else I've tried, but even with a strong Anti-virus package and firewall, I'm consistantly told by computed technicians that LimeWire is dangerous. 3 times limewire has been connected to rendering my Laptop inoperable and cost £75 every time I need to get it repaired. I just need to know, is LimeWire the problem or possibly the files I download (Only Music and Videos) because I really don't want to stop using it.

Delta476 April 16th, 2006 07:01 AM

Thanks for replying. I most recently had the free version (basic) but it was the most up to date release.

First Time i was Using McAfee Firewall with AVG 7.0 Free
Then Windows One Care Live Beta

Delta476 April 18th, 2006 02:41 PM

Thanks a lot for your help, much appreciated


All times are GMT -7. The time now is 06:21 AM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.