Gnutella Forums  

Go Back   Gnutella Forums > Current Gnutella Client Forums > LimeWire+WireShare (Cross-platform) > Technical Support > General Windows Support
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

General Windows Support For questions about Windows issues regarding LimeWire or WireShare or related questions


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old October 29th, 2005
Novicius
 
Join Date: October 28th, 2005
Posts: 4
joe_danger is flying high
Talking

Hello, i had the same problem as many of you, maybe this helps you in some form:

As you know, it was a virus, and that virus was installed because a file that was downloaded from a p2p program, like Kazaa, Limewire, etc. it seems that supports many of them.

When someone is infected by that virus, it makes a search, trying to find the Shared folder of one of the p2p programs supported and places a dummy file in that folder. The name of the file is obtained frow the names in warez pages, like phazeddl.com and others, and makes a zip file with a setup.exe file inside with a size of about 700kb or more, and because it is in shared folder, it is downloaded by members of the p2p programs.

If you download one of that files, and execute setup.exe it opens a dummy installer that sends an error to make the user that it wasn't installed, but in that moment it installs the virus and that installs a process, in my case it was winupdate.exe if i remember well.

Also the virus changes taskman.exe for a dummy file, that why you can't use Ctrl. + Alt. + Supr.. And creates some dummy com files for many common commands, like ping, regedit, etc. (about 10 in total). This is because when you call a program without the extension (.exe in this case) it executes the one with more precedence (.com haves more precedence than .exe), so when you try to execute one of this commands, it executes a dummy file, that does nothing.

Also as you have seen, it executes limewire every 15 seconds or so, so basically the computer begins to be full and slow.

THE SOLUTION (for me)

First, i changed the name of the Limewire was installed (to Limewir) so the virus could not execute limewire.

And easily enough, it was removed using Microsoft Anty Spyware Beta (last update). It detected the trojan and restored my taskman.exe file.

After that, i removed the .com copies(dummy's) of the command files the program installed.

And finally renamed my limewire folder and checked the shared folder to see if a file containing the trojan was created.

Maybe this can help you, i'm a Computer Systems Engineer and have experience with computer since i was 5, but this trojan was one of the most annoying things i have seen.

In internet you can find more information, using the name winupdates.exe and doing a google search.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Limewire is Acting funny???Messing up Windows! SRT4pssh General Windows Support 6 October 17th, 2007 12:17 PM
Limewire acting odd. Possible virus?? wjhsMandy General Windows Support 4 June 23rd, 2006 11:06 AM
Limewire acting weird..help sidhaanth Windows 2 November 8th, 2005 07:24 AM
LimeWire acting up...again DJ609 General Windows Support 0 April 27th, 2005 12:56 PM


All times are GMT -7. The time now is 10:27 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.