Computing.Net > Forums > Security and Virus > Limewire 851.7K files question

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Limewire 851.7K files question

Reply to Message Icon

Original Message
Name: Captn
Date: January 9, 2006 at 10:36:15 Pacific
Subject: Limewire 851.7K files question
OS: win2k
CPU/Ram: 1.8 / 524
Comment:

I notice many files, when checking different programs, many are 851.7 K and have been told there could be a problem when downloading these files. Can anyone explain any further about this? Many thanks. David...


Report Offensive Message For Removal


Response Number 1
Name: Abnormal
Date: January 9, 2006 at 11:17:55 Pacific
Reply:

All the same virus or whatever, one example is free ipod.

CrazyChicken132
Guest

Registered: Not Yet
Location:
Posts: N/A
fun lil viruses that have been floating round limewire

"earlier today i dled a file, this file was 851.7K accourding to limewire, this seems to be the generic file size for this virus. -- also it seems to be mainly a .zip

anyways after you have downloaded the file inside it will be another file called setup.exe, after running the setup.exe the user will get a classic install screen, but, after clicking the next button the havoc is wrecked.

the installer will pop up an error saying that the program is outdated and to please download the newest version, subsequent runnings of the file will do nothing.

now for the damage

program creates a folder on your harddrive, called my shared folder, if u alreadly have this folder it just adds a bunch of files to it. these files are all the same size (852K accourding to windows explorer) these files are almost all zips, a few wma and mp3s are sometimes created as well. but inside each of these zip files is a file called setup.exe.

this entire folder is shared out onto the limewire network further spreading the virus. it sucks up your system resources, blocks access to the taskmanager, sometimes is able to block command prompt, and spreads itself even more, i am sure that this virus does even more, but i really dont feel like finding out.

this little bugger is very nifty at hiding in your machine. it requires a few steps to remove:

first a command window must be opened
this can be done through
start-> all programs-> accessories-> command prompt
now type
C:\WINDOWS\system32\taskkill.exe /IM winupdates.exe
and push enter
this kills the process and allows access to command prompt
now type
attrib "c:\program files\winupdates" -s -h
this allows the user to see the folder that is required to delete
now type
del "c:\program files\winupdates"
confirm the delete
now to prevent from loading
type
del "c:\windows\prefetch\winupdates*
this prevents any error message you would see from trying to load a file that isnt where its supposed to be"

i hope this helps someone
-crazychicken132


My comment:



Report Offensive Follow Up For Removal

Response Number 2
Name: Abnormal
Date: January 9, 2006 at 16:07:04 Pacific
Reply:

You can scan unknown files at this link.

http://virusscan.jotti.org/


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: Limewire 851.7K files question

Syware free KaZaA and LimeWire
    Summary: Download the spyware-free version of KaZaA. The exact file you want is kazaa_lite_161_english.exe version 1.6.1. The file size is 1.2MB and you can get it here... http://ftp.attitud.com/pub/utils/kaz...
www.computing.net/answers/security/syware-free-kazaa-and-limewire/986.html

SLSS tied into Explorer
    Summary: I think i have a major ploblem here.... a big one... I have downloaded a rar file emulator on limewire only to find out that it was a virus. (I know to look out for 851.7kb file sizes) Now when I open...
www.computing.net/answers/security/slss-tied-into-explorer/18273.html

Fastclick all ther time
    Summary: Bill, The other HOSTS file, is the one that was talked about earlier. This one, to be more precise. It is talked about, and linked on this page. Let's try this, ok. Go to the HOSTS file you've been us...
www.computing.net/answers/security/fastclick-all-ther-time/12489.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software