Problems using P2P software - think might have virus!!

[zaz_fan]

Hello all, hope someone can help

I am having problems with P2P software Winmx and Soulseek.

Since upgrading to Winmx 3.53 I have had all kinds of problems. When I load up Winmx everything is fine for a while until all of a sudden Winmx will freeze and the taskbar will say the program is 'Not Responding'. I am then unable to shut down Winmx neither by clicking X or using Task Manager and have to shut down my computer by pressing the on/off button rather than by using 'Start'.

Once Winmx has frozen I am also unable to view anything online via Internet Explorer.

I have tried downloading Soulseek to see if it was just Winmx which was a problem but a similar thing happens with this. If I try opening anything behind Soulseek/Winmx both will freeze and I would have to turn computer off.

On a side note I have been experiencing problems with my connection to broadband where it appears that my Fast Ethernet Adapter is not connected even though it is. This problem is resolved by rebooting tho and the connection returns.

I am using Windows XP, McAfee Virus Scanner and have Zone Alarm Firewall (the free one) if this helps.

Sorry about the length of the message but I'm at wits end and really dont want to resort to formatting and re-installing all my software.

Thanks for listening


Dom

X

[Markoman01027]

Try turning off ZA and see what happens

[zaz_fan]

Just Spybot-ed my computer and it has come up with the following:-

DSO Exploit - 5 of them

Data Source Object Exploit - HKEY_USERS\S-a-5-18\Software\Windows\CurrentVersion\Internet Settings.....


Um, should I start panicking now!!!!!

Have removed them now....


Dom

[zaz_fan]

Originally Posted by Markoman01027 Try turning off ZA and see what happens

Think thats worked. Cheers. That save me a job of re-installing all my software.

Is there anythind I can do to make ZA still work in background?

Dom

P.S. Thanks again!!!!

[zaz_fan]

Spoke to soon. Didn't work.

Soulseek and Winmx still freezing without ZA running in background!!!

[Markoman01027]

Did you remove ALL spyware found? Did you only use Spybot? Download Adaware and remove the spyware that it finds. Update both programs & then scan again.
Do a virus scan from www.trendmicro.com and see what it picks up
Do you notice anything suspecious in your "processes" in task manager?

[kram 2.0]

Also, remember another thing - Adaware and Spybot are most effective when they are up to date - make sure you update them prior to running them. Housecall, as Markoman mentioned, is a good tool to run right now, as it looks like your computer is effected.

kram

[zaz_fan]

Originally Posted by Markoman01027 Did you remove ALL spyware found? Did you only use Spybot? Download Adaware and remove the spyware that it finds. Update both programs & then scan again. Do a virus scan from www.trendmicro.com and see what it picks up Do you notice anything suspecious in your "processes" in task manager?

Downloaded Adaware and removed all things it found. Went to Housecall and that came up with no results.

Can't really tell if there is anything suspicious in 'processes' in Task Manager.

There are 4 SVCHOST.EXE processes tho. 1 X Local 1 X Network and 2 X System.


Other ones I dont know what they are for:

ICWTRL.EXE
LSASS.EXE
CSRSS.EXE
SMSS.EXE
SERVICES.EXE
CARPSERV.EXE
MCSHEILD.EXE
WEBSCAN.EXE (think this might be something to do with McAFee)
SVCHOST.EXE
Cheers

Dom

[glc]

Next step is get rid of McAfee and use a less intrusive antivirus such as AVG. If you are using Zone Alarm version 5, get rid of that too and go back to 4.5.

The DSO exploits that Spybot is finding are not serious. They keep coming back, and Spybot is working on a fix.

The best fix is not to use P2P apps - none of them come without some kind of price.

[Rhi[N]o]

I have the same problem as you zaz_fan. I've done a lot of Google searches and a lot of people have the same problem.
First up DON'T DO A FRESH INSTALL!!
I've done an install on top of my existing windows (refresh) and a fresh install (Format and all) with no success. I'm guessing it's a program that I've updated that’s causing the problem, but can't think what it is. But like you, Soulseek is the trigger for it. I've been uninstalling the windows updates one by one to see if it's one of them, with no success so far.
It's extremely annoying! As you probably know.
Have you fixed your problem yet?
If not, maybe going though the programs we each have installed might give us some ideas.

[ghost2003]

go here to find out what programs are http://sysinfo.org/startuplist.php

Rhi[N]o, if you did a format then everything was erased, including any kind of malware. I use soulseek and i dont have any problems.

[zaz_fan]

Originally Posted by Rhi[N]o Have you fixed your problem yet? If not, maybe going though the programs we each have installed might give us some ideas.

The problem with Winmx is now fixed but still having problems with Soulseek hanging and causing probs shutting down computer.

[kev7555]

P2P sites are nothing but trouble. As long as you continue to use them you will fighting spyware, trojans and other malicious code.

Spyware COMES with the installation of WinMX and KaZaA.

What's a CD cost? Ten, fifteen bucks?

You can check out just about any popular music CD from a public library.



-Kev

[ghost2003]

winMX is clean. As long as your careful youll be ok, i never had a problem with malware through p2p.

[Rhi[N]o]

Originally Posted by ghost2003 go here to find out what programs are http://sysinfo.org/startuplist.php Rhi[N]o, if you did a format then everything was erased, including any kind of malware. I use soulseek and i dont have any problems.

Yeah I know that Ghost, I never actually said it was anything like that, although the thought had crossed my mind a few times.
I have done 2 or 3 full Norton scans since the problem and after I sent that post I did another scan. For some reason, it only just picked up a Trojan and a spybot.Worm virus...unless I only just got it. Since then I've had no troubles with my task bar freezing when using Soulseek or any other program, and I've connected 3 times. Therefore it was either one or both of those viruses or it was the last windows update I uninstalled. For the record it was "Security Update for Windows XP (KB837001)" but I feel this is not the cause of the prob. I will reinstall the updates one by one to see if it was one or more of the updates.

In all things are looking up..

BTW: This is the first time I've had a problems with Soulseek or any other p2p program kev7555.

[kev7555]

I make a good living cleaning spyware and viruses from computers owned by average users.

There are three common threads on most ALL infected computers I repair.

1) non-existent or out-of-date virus programs.

2) non-existent or out-of-date spyware programs

3) the use of p2p programs.



Just my two cents.

-Kev

[kev7555]

Don't get me wrong, I wasn't trying to be offensive or anything. I just deal with this stuff every day. My two kids used to run p2p programs on my main computers. I was dealing with spyware and viruses on a daily basis. I finally built them their own sytems and told them to keep that stuff off of mine. Since then the malware problems have virtually disappeared.

And I get to make money cleaning theirs for them.


Realistically (OK, now this is the musician in me speaking... I've been in the biz all my life and never made much money at it) it's the little guys that get hurt by this stuff. Screw the millionaires like Lars Ulrich, he can afford to lose a few royalties but the little guys (read: "alternative") who don't make much anyway are the ones who lose big time on this stuff.

OK, rant over...sorry.

-Kev

[thorlo6]

Originally Posted by kev7555 Realistically (OK, now this is the musician in me speaking... I've been in the biz all my life and never made much money at it) it's the little guys that get hurt by this stuff. Screw the millionaires like Lars Ulrich, he can afford to lose a few royalties but the little guys (read: "alternative") who don't make much anyway are the ones who lose big time on this stuff. OK, rant over...sorry. -Kev

You got that right kev! It's the little guys like you and me that are the ones that usually get hurt by all the spyware, trojans, worms, etc.. Despite what glc said earlier(I'm one of glc's biggest fans), I swear by McAfee! It has never done anything but save my hairy backside! I not only use their AV program, but, their Personal Firewall Plus. "nuff said. thorlo6

[kev7555]

Well, you're right there too, but I was talking about the "little guy" musicians.

The big guys are losing pennies on a song that gets pirated because the record companies make 98% of the profits from CD sales. But the little guys, who may have self-promoted and sold their music online for five or ten bucks per cd are the ones losing big time when someone copies their songs instead of buying them.

Call me whatever you want but the music industry has taken advantage of musicians for the better half of the last century. Don't be fooled by a handful of big-time musicians complaining about piracy. The drive to stop the original Napster and p2p sites was industry-driven because it's the industry that is making all the cash, not the musicians. Do you think musicians LIKE touring all the time and being away from home and family? Tours are where they make their cash.

My point simply is that you hurt homegrown guys who record in their basement (when you download that type of music). Sure, it hurts the big guys a little, but not like it hurts the ones who are just trying to get started.


-Kev

[glc]

Okay guys - this is not the forum to debate that issue. Whether the use of P2P is right or wrong is not pertinent to the topic. However, we CAN say that the use of P2P seems to invite malware problems (or not - if you disagree with THAT) because there's no quality control, so to speak - any file can be something other than what you think it is.

I've noticed pretty much the same thing as you, Kev.

[kev7555]

OK, thanks.

I've been warned. I will try to stay on subject.



-Kev

[thorlo6]

Sorry glc. I didn't mean to get off subject. zaz fan, have you tried doing a scan just of your copy of soulseek? Use adaware, spybot s&d, as well as your AV to scan just soulseek. You might find something there. Hope that helps.thorlo6

[jonro]

If your going to use P2P software i suggest going in the direction of Bit swaping, ie Bit torrent ect.
I find it to be the safest and fastest method of swaping files over the internet
Heres a link to the biggest Bit Swapping site: http://www.suprnova.org/ lots of info there in the forums.

Hope that helps
))))))

[zaz_fan]

Used Soulseek with no problems at all yesterday. Think the problem may have been with ZoneAlarm as problems started when I installed an update.

Since problems started there has been another update and now no problems with either Winmx or Soulseek.

Thank you everyone for your help

zaz_fan

[RJS2]

i like dc++ might wanna try that if your gonna use p2p and i havent found a virus yet and it helps to have a idea what ur looking for and what to download and not to