Has anyone ever had any problems with viruses from Limewire?

Answer 1

Yeah. you can get viruses from Limewire, just get a virus protection program, and you should be good to go.

Answer 2

Limewire is the p2p highway. Up to you what you DL!

But, the RIAA coerced Limewire to put in blocks.

The Limewire developers created Frostwire and distribute Frostwire from offshore servors. Frostwire is everything that Limewire Pro is, without the CONTROL of the ":Digital Rights Management", and without the NAG SCREENS for money to 'upgrade'!!!

Bonus!!! Frostwire is INCLUDED in http://pclinuxos.com with the
5500 FREE GAMES and PROGRAMS!

Answer 3

Limewire doesn't give you a virus. If you get a virus it comes with the file you download.

All Limewire does is allow you to connect to another computer.

If you download questionable files they may contain a virus.

You should run anti virus software. If you don't have any then you should download AVG anti Virus free here –

http://downloads-zdnet.com.com/AVG-Anti-Virus-Free-Edition/3000-2239_2-10503939.html?tag=lst-0-2

Answer 4

Just about any person who uses P2P software for download or uploads is at a high risk of getting viruses. Just like entering a poro site, the odds are you are going to get infected with a trojan.

Same for crack or serial houses.

Minddoctor, France

Answer 5

Yes. All are affected by virusesonetime or the other....! You insatll a standard antivirus soft ware such as Norton, AVG , Avast ( free antivirus software and Ad-aware, Ewido ( free spyware removers). You can download free softwares at
http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Answer 6

United States Andean Region - Spanish
Asia Pacific - English
Australia & New Zealand
Austria
Belgium - Dutch
Brazil
Canada - English
Canada - French
Central America & Caribbean - Spanish
China - Simplified Chinese
Czech Republic
Denmark
Finland
France
Germany
Greece
Hong Kong - English
Hungary
India - English
Indonesia - English
Israel
Italy
Japan
Korea
Luxembourg - French
Malaysia - English
Mexico
Middle East - English
The Netherlands
Norway
Philippines - English
Poland
Russia
Singapore - English
South Africa - English
Southern Latin America - Spanish
Spain
Sri Lanka - English
Sweden
Switzerland - German
Taiwan - Traditional Chinese
Thailand - English
Turkey
United Kingdom & Ireland
United States
Vietnam - English
Symantec.com Home & Home Office Small & Mid-Sized Business Enterprise Partners Locate a Partner Become a Partner Log In to PartnerNet About Symantec Corporate Profile Management Team Investor Relations News Careers Cart
WelcomeEnterpriseSmall & Mid-Sized BusinessHome & Home OfficePartnersAbout Symantec Search All of Symantec All of Symantec
Support
Viruses & Risks
Home & Home Office
Small & Mid-Sized Business
Enterprise
Partners

Symantec.com > Security Response > W32.Saros@mm
W32.Saros@mmRisk Level 2: LowPrinter Friendly Page
SUMMARY TECHNICAL DETAILS REMOVAL Discovered: August 2, 2004
Updated: August 5, 2004 09:28:31 AM PDT
Also Known As: I-Worm.Saros.a [Kaspersky], W32/Saros@MM [McAfee]
Type: Worm
Infection Length: 48,514 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When W32.Saros@mm is run, it performs the following actions:

Attempts to create the following files, which are copies of itself:
WINDOWS\system32\NonYou.exe
WINDOWS\system32\Love-ScreenSaver.scr
WINDOWS\system32\MSOutlookInternetUpdate.exe
progra~1\Kazaa\My Shared Folder\Rosy.exe
progra~1\Kazaa\My Shared Folder\Pipponoto.exe
progra~1\Kazaa\My Shared Folder\Anastacia - Left Outside Alone.mp3.exe
progra~1\Kazaa\My Shared Folder\The Rasmus - In The Shadows.mp3.exe
progra~1\Kazaa\My Shared Folder\50 Cent - In da Club.mp3.exe
progra~1\Kazaa\My Shared Folder\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Kazaa\My Shared Folder\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Kazaa\My Shared Folder\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Kazaa\My Shared Folder\Raf - In tutti i miei giorni.mp3.exe
progra~1\Kazaa\My Shared Folder\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Kazaa\My Shared Folder\Lionel Richie - Just For You.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Rosy.exe
progra~1\Kazaa Lite\My Shared Folder\Pipponoto.exe
progra~1\Kazaa Lite\My Shared Folder\Anastacia - Left Outside Alone.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\The Rasmus - In The Shadows.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\50 Cent - In da Club.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Raf - In tutti i miei giorni.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Kazaa Lite\My Shared Folder\Lionel Richie - Just For You.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Rosy.exe
progra~1\Kazaa Lite K++\My Shared Folder\Pipponoto.exe
progra~1\Kazaa Lite K++\My Shared Folder\Anastacia - Left Outside Alone.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\The Rasmus - In The Shadows.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\50 Cent - In da Club.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Haiducii - Dragostea din tei.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Raf - In tutti i miei giorni.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Kazaa Lite K++\My Shared Folder\Lionel Richie - Just For You.mp3.exe
progra~1\ICQ\Shared Folder\Rosy.exe
progra~1\ICQ\Shared Folder\Pipponoto.exe
progra~1\ICQ\Shared Folder\Anastacia - Left Outside Alone.mp3.exe
progra~1\ICQ\Shared Folder\The Rasmus - In The Shadows.mp3.exe
progra~1\ICQ\Shared Folder\50 Cent - In da Club.mp3.exe
progra~1\ICQ\Shared Folder\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\ICQ\Shared Folder\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\ICQ\Shared Folder\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\ICQ\Shared Folder\Raf - In tutti i miei giorni.mp3.exe
progra~1\ICQ\Shared Folder\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\ICQ\Shared Folder\Lionel Richie - Just For You.mp3.exe
progra~1\Grokster\My Grokster\Rosy.exe
progra~1\Grokster\My Grokster\Pipponoto.exe
progra~1\Grokster\My Grokster\Anastacia - Left Outside Alone.mp3.exe
progra~1\Grokster\My Grokster\The Rasmus - In The Shadows.mp3.exe
progra~1\Grokster\My Grokster\50 Cent - In da Club.mp3.exe
progra~1\Grokster\My Grokster\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Grokster\My Grokster\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Grokster\My Grokster\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Grokster\My Grokster\Raf - In tutti i miei giorni.mp3.exe
progra~1\Grokster\My Grokster\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Grokster\My Grokster\Lionel Richie - Just For You.mp3.exe
progra~1\Bearshare\Shared\Rosy.exe
progra~1\Bearshare\Shared\Pipponoto.exe
progra~1\Bearshare\Shared\Anastacia - Left Outside Alone.mp3.exe
progra~1\Bearshare\Shared\The Rasmus - In The Shadows.mp3.exe
progra~1\Bearshare\Shared\50 Cent - In da Club.mp3.exe
progra~1\Bearshare\Shared\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Bearshare\Shared\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Bearshare\Shared\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Bearshare\Shared\Raf - In tutti i miei giorni.mp3.exe
progra~1\Bearshare\Shared\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Bearshare\Shared\Lionel Richie - Just For You.mp3.exe
progra~1\eDonkey2000\Incoming\Rosy.exe
progra~1\eDonkey2000\Incoming\Pipponoto.exe
progra~1\eDonkey2000\Incoming\Anastacia - Left Outside Alone.mp3.exe
progra~1\eDonkey2000\Incoming\The Rasmus - In The Shadows.mp3.exe
progra~1\eDonkey2000\Incoming\50 Cent - In da Club.mp3.exe
progra~1\eDonkey2000\Incoming\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\eDonkey2000\Incoming\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\eDonkey2000\Incoming\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\eDonkey2000\Incoming\Raf - In tutti i miei giorni.mp3.exe
progra~1\eDonkey2000\Incoming\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\eDonkey2000\Incoming\Lionel Richie - Just For You.mp3.exe
progra~1\eMule\Incoming\Rosy.exe
progra~1\eMule\Incoming\Pipponoto.exe
progra~1\eMule\Incoming\Anastacia - Left Outside Alone.mp3.exe
progra~1\eMule\Incoming\The Rasmus - In The Shadows.mp3.exe
progra~1\eMule\Incoming\50 Cent - In da Club.mp3.exe
progra~1\eMule\Incoming\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\eMule\Incoming\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\eMule\Incoming\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\eMule\Incoming\Raf - In tutti i miei giorni.mp3.exe
progra~1\eMule\Incoming\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\eMule\Incoming\Lionel Richie - Just For You.mp3.exe
progra~1\Morpheus\My Shared Folder\Rosy.exe
progra~1\Morpheus\My Shared Folder\Pipponoto.exe
progra~1\Morpheus\My Shared Folder\Anastacia - Left Outside Alone.mp3.exe
progra~1\Morpheus\My Shared Folder\The Rasmus - In The Shadows.mp3.exe
progra~1\Morpheus\My Shared Folder\50 Cent - In da Club.mp3.exe
progra~1\Morpheus\My Shared Folder\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Morpheus\My Shared Folder\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Morpheus\My Shared Folder\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Morpheus\My Shared Folder\Raf - In tutti i miei giorni.mp3.exe
progra~1\Morpheus\My Shared Folder\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Morpheus\My Shared Folder\Lionel Richie - Just For You.mp3.exe
progra~1\LimeWire\Shared\Rosy.exe
progra~1\LimeWire\Shared\Pipponoto.exe
progra~1\LimeWire\Shared\Anastacia - Left Outside Alone.mp3.exe
progra~1\LimeWire\Shared\The Rasmus - In The Shadows.mp3.exe
progra~1\LimeWire\Shared\50 Cent - In da Club.mp3.exe
progra~1\LimeWire\Shared\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\LimeWire\Shared\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\LimeWire\Shared\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\LimeWire\Shared\Raf - In tutti i miei giorni.mp3.exe
progra~1\LimeWire\Shared\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\LimeWire\Shared\Lionel Richie - Just For You.mp3.exe
progra~1\Tesla\Files\Rosy.exe
progra~1\Tesla\Files\Pipponoto.exe
progra~1\Tesla\Files\Anastacia - Left Outside Alone.mp3.exe
progra~1\Tesla\Files\The Rasmus - In The Shadows.mp3.exe
progra~1\Tesla\Files\50 Cent - In da Club.mp3.exe
progra~1\Tesla\Files\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\Tesla\Files\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\Tesla\Files\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\Tesla\Files\Raf - In tutti i miei giorni.mp3.exe
progra~1\Tesla\Files\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\Tesla\Files\Lionel Richie - Just For You.mp3.exe
progra~1\WinMX\Shared\Rosy.exe
progra~1\WinMX\Shared\Pipponoto.exe
progra~1\WinMX\Shared\Anastacia - Left Outside Alone.mp3.exe
progra~1\WinMX\Shared\The Rasmus - In The Shadows.mp3.exe
progra~1\WinMX\Shared\50 Cent - In da Club.mp3.exe
progra~1\WinMX\Shared\Vanessa Carltron - Ordinary Day.mp3.exe
progra~1\WinMX\Shared\Haiducii - Dragostea Din Tei.mp3.exe
progra~1\WinMX\Shared\Black Eyed Peas - Hey Mama.mp3.exe
progra~1\WinMX\Shared\Raf - In tutti i miei giorni.mp3.exe
progra~1\WinMX\Shared\Vasco Rossi - Buoni e cattivi.mp3.exe
progra~1\WinMX\Shared\Lionel Richie - Just For You.mp3.exe


Creates the file, \WINDOWS\system32\About.hta, which is a harmless HTML file.


Displays the message:

Title: Microsoft Windows Update
Text: Click Yes For Update Microsoft Outlook via E-mail


Creates and runs the file, \WINDOWS\system32\nstdnrdll32.vbs. This VBScript file performs the following actions:

Creates the following registry keys:

"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Runonce\
wincomp32\default" = "WINDOWS\system32\nstdnrdll32.vbs
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
nldr32\default" = "WINDOWS\system32\NonYou.exe"
"HKEY_CURRENT_USER\Software\Microsoft\Office\8.0\Outlook\Security\Level1Remove", "exe" "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Security\Level1Remove", "exe" "HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Security\Level1Remove", "exe"


Creates the archive file, \WINDOWS\system32\Love-ScreenSaver.cab, which contains a copy of the worm.

Checks the system date, and if the day of the month is the 11th or 23rd, it will change the Internet Explorer start page to www.gedzac.tk, and open the file \WINDOWS\system32\About.hta in a Web browser.


Sends an email to all the entries in the Microsoft Outlook Address Book.

The email will have the following properties:

Subject: Microsoft Outlook News
Message: Microsoft Outlook Update / Bug Fixed - Contact: [e-mail]
Attachment: MSOutlookInternetUpdate.exe


Opens the Web site www.windowsupdate.com.


Adds the line:

n2 = tdll32.dll

to the [rfiles] section of the file, \Program Files\mIRC\mirc.ini.


Opens the file:

Program Files\mIRC\tdll32.dll

and writes an IRC script to send the file, Love-ScreenSaver.cab, to other MIRC users.


Checks the system date. If the day of the month is the 11th or 23rd, it will display two messages:

Title: NonYou
Text: Rosy Ti Amo - Saro & Rosy Forever

Title: Gedzac Group 2004
Text:
NonYou.a Gedzac Labs Productions
Coded by Sarosoft - Dedicated to my Love Ros
Gedzac Group 2004 - http:/ /www.gedzac.tk
Gedzac
The Virus Crew




RecommendationsSymantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":

Turn off and remove unneeded services. By default, many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server. These services are avenues of attack. If they are removed, blended threats have less avenues of attack and you have fewer services to maintain through patch updates.
If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.
Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services (for example, all Windows-based computers should have the current Service Pack installed.). Additionally, please apply any security updates that are mentioned in this writeup, in trusted Security Bulletins, or on vendor Web sites.
Enforce a password policy. Complex passwords make it difficult to crack password files on compromised computers. This helps to prevent or limit damage when a computer is compromised.
Configure your email server to block or remove email that contains file attachments that are commonly used to spread viruses, such as .vbs, .bat, .exe, .pif and .scr files.
Isolate infected computers quickly to prevent further compromising your organization. Perform a forensic analysis and restore the computers using trusted media.
Train employees not to open attachments unless they are expecting them. Also, do not execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if certain browser vulnerabilities are not patched.

Writeup By: Rodney Andres
Removal Summary PRINT THIS PAGE
RATE THIS PAGE
TOP THINGS TO DO
See all Viruses & Risks
Secure your email
Browse the web safely
Read the Security Response Weblogs
Scan your computer for malware
Search Threats
Search by name
Example: W32.Beagle.AG@mm

Site Index · Legal Notices · Privacy Policy · Site Feedback · Contact Us · Global Sites · License Agreements
©1995 - 2006 Symantec Corporation