Gnutella Forums - Phantom Files

Gnutella Forums (https://www.gnutellaforums.com/)

- Open Discussion topics (https://www.gnutellaforums.com/open-discussion-topics/)

- - Phantom Files (https://www.gnutellaforums.com/open-discussion-topics/22022-phantom-files.html)

I am getting phantom files in my Limewire Shared folder and my virus checker thinks its a virus. If I delete the files, they just reappear after I reboot.

Help

Probably its not a phantom file. Can you give me the virus name the AV gives you?

Explorer says there is 647 files ALL 31KB in size and the AV says their infected with the W32.Kwbot.worm

I've done a search, here is the description of your virus.
Actually it has backdoor capabilities, so take care:

http://securityresponse.symantec.com...wbot.worm.html

In case you don't care about that and only want to remove it, here are the removal instructions found on that page. In case you are not using Norton just do it with your AV.

Quote:

Update the virus definitions, restart in Safe mode, and run a full system scan. Delete all files that Norton AntiVirus detects as W32.Kwbot.Worm.
Delete the value

Windows Explorer Update Build 1142

from the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices

And in future always check .exe / .com files before running them :)

Cleared it right up.

Thanks!!