Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old March 9th, 2007
Eye of the Sky
 
Join Date: March 8th, 2007
Posts: 7
Limbabnees is flying high
Exclamation Do i have a rootkit in my system ?

Hi, have some problems for week by now.

System is WinXp SP2
LimeWire BASIC
Think i've got i virus or a rootkit. Only possible to download corrupted files.
If try do download a normal file it will be after 2 seconds remove in status bar.
If check file from user who connecting to me they all have the same File's and some very nasty names.

URGENT LIMEWIRE UPDATE-download AND install now.exe

Get some help from Dutch Forem, did HIJACK , can't find anything.
Do some research about prevention and read a lot.
What's the problem?
Have Sygate running and try to backtrace.
Did Online BitDefender, couldn't find anything
Did scan with SuperAntispyware, couldn't find anything
Reply With Quote
  #2 (permalink)  
Old March 9th, 2007
mickjapa108's Avatar
Valued Member contributor
 
Join Date: February 2nd, 2006
Location: England
Posts: 1,405
mickjapa108 has a spectacular aura about
Default

Limbabnees Hi.
If you suspect a rootkit, then go to one of the Free computer Help sites listed here, They realy know what there doing. Regester and post in there
forum, They will instruct you to D/L & run software that can be trusted,
Not all sites are Genuin, These three are recomended by tekies.
Click on one of these Blue links.
http://forums.spywareinfo.com/index.php?showtopic=79038

http://www.castlecops.com/HijackThis.html

http://www.bleepingcomputer.com/

If the site you choose gives you good help, Tell us it helps others.
Peace.
__________________
mickjapa108
Reply With Quote
  #3 (permalink)  
Old March 9th, 2007
Valued Member
 
Join Date: May 30th, 2004
Location: United Kingdom
Posts: 2,866
ukbobboy01 will become famous soon enough
Default AVG Anti-Rootkit (Beta)

Limbabnees

Following on from Mickjapa108 advice, you could try AVG Anti-Rootkit (Beta). As you can see, it's still in beta but it is free and, since I have used it several times, can vouch that it is safe.

The URL is: http://www.grisoft.com/doc/21/us/crp/0



UK Bob
Reply With Quote
  #4 (permalink)  
Old March 9th, 2007
Eye of the Sky
 
Join Date: March 8th, 2007
Posts: 7
Limbabnees is flying high
Default

Thanks, i go check there
Reply With Quote
  #5 (permalink)  
Old March 10th, 2007
Eye of the Sky
 
Join Date: March 8th, 2007
Posts: 7
Limbabnees is flying high
Default

Found nothing with those programs.
Did Panda Activescan and only SDFix.exe.
Well the only tootkit is SDFix.exe, but that i knew. It's in a backup directory.

I had some help from dutch forum and i had to do Hijack for him.

Why do i still have problems with Limewire.
Only possible to download nasy things, all normal files are not possible to download.
If try to download Sygate.zip he put it in status bar: "Wait" 1 second later: "Delete"

It looks like something is controle my system.
Even with install Ad-Aware & CCleaner. Not Possible, if wanna install all go good till a certen point. after 5 % of install it's just stop and disappear.

Have some one maybe answers on this. It's now a week i have those problems

Limbabnees.
Reply With Quote
  #6 (permalink)  
Old March 10th, 2007
6_pac's Avatar
Psst...over here!
 
Join Date: April 5th, 2005
Location: Lookin for you
Posts: 3,227
6_pac is a glorious beacon of light
Default

Are you sure your not trying to d/load fake files?

See Recognising Fake files, also this post by LOTR: http://www.gnutellaforums.com/showthread.php?t=63993.


Try d/loading a file from here and let us know how it goes: http://www.magnetmix.com/audio2.shtml

@ UK BOb, Thanks for that prog. Tried it and my system is clean .
__________________
If it ain't broke, fix it till it is!
Reply With Quote
  #7 (permalink)  
Old March 10th, 2007
Eye of the Sky
 
Join Date: March 8th, 2007
Posts: 7
Limbabnees is flying high
Default

Quote:
Originally Posted by 6_pac
Are you sure your not trying to d/load fake files?

Try d/loading a file from here and let us know how it goes: http://www.magnetmix.com/audio2.shtml

@ UK BOb, Thanks for that prog. Tried it and my system is clean .
Looks like big trouble.

If i try to download one of these (tried all) it brings me too an error site.
Can't find server.
magnet:?xt=urn:sha1:AZO45B2WM4Q46KYXC6N3VPX3LH2QHT GW&dn=Martin%20-%20Get%20It%20Right.mp3&xs=http://magnetmix.com:6346/uri-res/N2R?urn:sha1:AZO45B2WM4Q46KYXC6N3VPX3LH2QHTGW

Is this correct?

I downloaded Sygate.zip
This is what i find in my download map!!!

Sygate Personal Firewall Full v5 6 3408 rar.zip - ZIP archive, unpacked size 210.432 bytes

If try to unpack it NOD32 get Alert
Win32/TrojanDropper.VB.NAI trojan, lucky for me i download on D-Drive

Hmmm, seems someone do some ad things on my PC

And if look in overview who's connecting to me i fins very strange names, 4blocks.

This is what i see in whatever i selecting for downloading.
T-77562-URGENT LIMEWIRE UPDATE-download AND install now.exe

Very bad files only to find.

If i put in a name from a band or singer, nothing comes out. Only bad files.
I even tried with Elvis, who dont know him
If i wanna download the file (only zips & exe, there are no mp3 visible) from Elvis, it already excist.

Well im not good at finding hacker tools, and my software and even hijack wont find anything.

Think i block Limewire in sygate, maybe it does something i not see
Attached Thumbnails
Do i have a rootkit in my system ?-ooh.jpg   Do i have a rootkit in my system ?-user-4-blocks.jpg  

Last edited by Limbabnees; March 10th, 2007 at 11:06 AM.
Reply With Quote
  #8 (permalink)  
Old March 10th, 2007
Part Timer
 
Join Date: December 28th, 2006
Posts: 18
tomvee is a great assister to others; your light through the dark tunnel
Default

Quote:
Originally Posted by Limbabnees
Looks like big trouble.

(
If you keep trying to follow the path that you are taking it's only going to get worse. It's never a good idea to try & download programs such as Sygate from Limewire. They are almost always bundled with viruses that will cause problems on your computer. You should follow the advice mickjapa108 gave you above & go & have your computer checked by experts at one of the forums listed.

If you aren't up to doing that, at least run an in-depth scan with NOD32.

BTW: You can get Sygate for free here:

http://www.tucows.com/preview/213160
Reply With Quote
  #9 (permalink)  
Old March 11th, 2007
Eye of the Sky
 
Join Date: March 8th, 2007
Posts: 7
Limbabnees is flying high
Default

Yes i have the free version, i was just checking the posiblilities for downloading. Thats why i saw all those strange things.

Btw, all checks are negative. Even NOD32 Deep scan.
HijackThis found nothing.

Come from dutch forum and *Kingpin* (Moderator) advised me to let check my system over here.
http://www.nationaalcomputerforum.nl...splay.php?f=25

Ask it again:
Quote:
Very bad files only to find.

If i put in a name from a band or singer, nothing comes out. Only bad files.
I even tried with Elvis, who dont know him
If i wanna download the file (only zips & exe, there are no mp3 visible) from Elvis, it already excist.

Well im not good at finding hacker tools. My software and even hijackthis wont find anything.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
new to system superrock68 Download/Upload Problems 1 March 15th, 2006 03:36 PM
Is the system down? bandit1 Connection Problems 1 February 12th, 2005 08:31 PM
Reformatted system Unregistered Windows 1 February 4th, 2002 11:57 AM
Uses too much system. Unregistered XoloX Feature Request 1 September 23rd, 2001 06:14 AM
B2B system? Unregistered General Gnutella / Gnutella Network Discussion 0 June 25th, 2001 08:04 PM


All times are GMT -7. The time now is 09:31 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.