Live Security Platinum Virus

R

rdouglas

New Member
Thread author
Jul 17, 2012
3
0
2
60
7/15/12 - I was browsing the internet and received a fake security warning from Live Security Platinum, thus, I have been infected. Now, I am unable to start any executable files or connect to the internet to download possible solutions. I began the removal process for Live Security Platinum by starting in safe mode with networking but am unable to establish a wireless connection on the infected laptop.

I have no idea what to do now.

I appreciate any suggestions.

Thanks.

rdouglas
 
Hello Jack,

Unfortunately no, I am unable to get my wireless connection to function at all. I'm not sure if I should try a re-install or what. I'm not as well versed at dealing with these issues as I would like to be.

Jack said:
Hello rdouglas,
While on Normal mode are you able to connect to the Internet?
Click to expand...
 
Here is an activation code for Live Security Platinum: AA39754E-715219CE , this will NOT remove this rogue software,however it should stop those annoying alerts until we will use the removal tools.

Before doing the below , Did you try to reset the router? IF no, then you can try to do that before running the below commands.Needless to say that if a restart of your Wifi works than you don't need the below steps.

<hr />
Please try this fix for your internet connection:

  1. Open Services (Start then Run, type services.msc and press Enter)
  2. Double click on Wireless Zero Configuration
  3. Set Startup type to Automatic
  4. Click the Start button to start the service
  5. Click Apply then OK
  6. Open Network Connections.
  7. Right click on Wireless Network Connection, select Properties.
  8. Click the Wireless Networks tab and check the "Use Windows to configure my wireless network settings" box.
  9. Click OK.
  10. Restart your computer.
Next,
1. Click START
2. Type “CMD” and press ENTER
3. Right-click “CMD.EXE” >> “Run as administrator” OR Hold ctrl+shift, and press ENTER
4. Click “Continue” on the “User Account Control” Window
5. Type <>ipconfig /renew</> as normal. It should release & renew the IP address.
<hr />
If it doesn't work:

Please can you goto the device manager for me and report any yellow marks. To do this please do the following

1.Click Start and go to Run
2.In the run box type devmgmt.msc and hit enter

If everything is ok there try the following.

1.Click Start and go to Run
2.In the run box type notepad.exe
3.Paste the following code below into notepad and save as reset.bat


Please save everything before running this file as it will restart your computer automatically

Code: 
@echo off

ipconfig /flushdns
netsh int ip reset
netsh winsock reset
netsh firewall reset
shutdown -r -t 0
<hr />
Waiting to see if we have an working connection or not!
As a separate note,if you put the cable in the computer ,does your internet connection work?
 
Last edited:
I have my connection back and it appears that the virus is gone. It appears. Let's hope.

Thank you for all the help. I greatly appreciate it.

Thanks again.

rdouglas
 
Hello,
Can you please run the below scans:
STEP 1. Run a scan with Kaspersky Virus Removal Tool
Click <a title="External link" href="http://www.kaspersky.com/antivirus-removal-tool?form=1" rel="nofollow external" rel="nofollow"><>here</></a> to download the Kaspersky Virus Removal Tool.
<ol>
<li>Save it to your desktop.</li>
<li>Double click the setup file to run it.</li>
<li>Follow the onscreen prompts until it is installed</li>
<li>Click the Options button (the 'Gear' icon), then make sure only the following are ticked:
<ul>
<li><span style="color: #ff0000;">System Memory</span></li>
<li><span style="color: #ff0000;">Hidden startup objects</span></li>
<li><span style="color: #ff0000;">Disk boot sectors</span></li>
<li><span style="color: #ff0000;">Local Disk (C: )</span></li>
<li><span style="color: #ff0000;">Also any other drives (Removable that you may have)</span></li>
</ul>
</li>
<li>Then click on <>Actions</> on the left hand side</li>
<li>Click <>Select Action</>, then make sure both <>Disinfect</> and <>Delete if disinfection fails</> are ticked</li>
<li>Click on <>Automatic Scan</></li>
<li>Now click the <>Start Scanning</> button, to run the scan</li>
<li>After the scan is complete, click the reports button ('Paper icon', next to the 'Gear' icon) on the right hand side</li>
<li>Click <>Detected threats</> on the left</li>
<li>Now click the <>Save</> button, and save it as <>kaslog.txt</> to your <>Desktop</></li>
<li>Please attach kaslog.txt in your next reply.</li>
</ol>
<hr />
STEP 2. Run a scan with ESET Online Scanner
<ol>
<li>Download ESET Online Scanner utility.
<><a title="External link" href="http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" rel="nofollow">ESET Online Scanner Download Link</a></> <em>(This link will automatically download ESET Online Scanner on your computer.)</em></li>
<li>Double click on the Eset installer program (esetsmartinstaller_enu.exe).</li>
<li>Check <>Yes, I accept the Terms of Use</></li>
<li>Click the <>Start</> button.</li>
<li>Check <>Scan archives</></li>
<li>Push the <>Start</> button.</li>
<li>ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.</li>
<li>When the scan completes, push <>List of found threats</></li>
<li>Push <>Export to Text file </> and save the file to your desktop using a unique name, such as <>ESET Scan</>. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.</li>
<li>Push the <>back</> button.</li>
<li>Push <>Finish</></li>
</ol>
<hr />
STEP 3: Download and run OTL
<ol><li>Download the OTL utility using the below link :
<><a title="External link" href="http://oldtimer.geekstogo.com/OTL.exe" rel="nofollow external">OTL DOWNLOAD LINK</a> <em>(This link will automatically download OTL on your computer)</em></></li>
<li>Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL-logo.png" alt="" title="OTL-logo" width="106" height="118" class="alignnone size-full wp-image-3946" /></li>
<li>When the window appears, <>underneath Output</> at the top change it to <>Minimal Output</>.</li>
<li>Check the boxes beside <>LOP Check</> and <>Purity Check</>.</li>
<li>Under the Custom Scan box paste this in:

Code: 
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
CREATERESTOREPOINT
</li>
<li>Click the<> Run Scan</> button.</li>
<li>When the scan completes, it will open two notepad windows. <>OTL.Txt</> and <>Extras.Txt</>. These are saved in the same location as OTL.
<>Please post this 2 logs in your first reply.</>.</li></ol>
<em>Note: If OTL.exe will not run, it may be blocked by malware. Try these alternate versions: <a title="External link" href="http://www.itxassociates.com/OT-Tools/OTL.scr" rel="nofollow external">OTL.scr</a>, or <a title="External link" href="http://oldtimer.geekstogo.com/OTL.com" rel="nofollow external">OTL.com</a>.</em>
<hr />
What's next?

Attach the following logs to your post (You can find here details on how to use the Attachment System):

1.Kaspersky log
2.ESET log
3.OTL logs
4.Let me know if you had any problems with the above instructions and also let me know how things are running now!
 
Last edited:

You may also like...