Live Security Platinum has taken over my laptop! HELP!

[Jaha699]

I can't do anything on my computer including access the control panel - this Live Security Platinum pops up whenever I try to do anything and suggests that the only way to move past it is to pay $60 for antivirus software. I have tried to apply the Malwarebytes' Anti-Malware software, but this horrid virus is blocking it.

Any insight? Any and all suggestions are welcome!

Thanks in advance!

~SJC

[Maniac]

Hello Jaha699! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  

Please follow this guide to get rid of this rouge application:

http://forums.malwarebytes.org/index.php?showtopic=110630

[Jaha699]

Thank you!

I'm going through the process now... I will let you know shortly how it turns out

[Jaha699]

It's still goin through the process, but I am able to use my computer while the program works. You're a lifesaver! Thanks again, Maniac!

[Maniac]

I would like to see the log file when you finish.

[Jaha699]

I'm happy to supply the log file. Where would I find this? I got your message after I had finished and shut everything down - can I still access the log file?

Thanks and HAPPY BIRTHDAY!!

[Maniac]

Thanks!

Please run Malwarebytes' Anti-Malware and go to Logs tab and the log file on the top should be the latest log file. Double-click on it and will be open. Copy/paste the entrie log in your next reply.

[Jaha699]

Here's the log...

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org

Database version: v2012.07.19.15

Windows Vista Service Pack 1 x86 FAT32

Internet Explorer 8.0.6001.19088

Sorelle :: SORELLE-PC [administrator]

7/19/2012 8:09:45 PM

mbam-log-2012-07-19 (20-09-45).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 265341

Time elapsed: 31 minute(s), 42 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 4

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum (Trojan.Lameshield) -> Quarantined and deleted successfully.

HKCR\CLSID\{A77D3539-581D-450C-9E44-A84C415A6172} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A77D3539-581D-450C-9E44-A84C415A6172} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A77D3539-581D-450C-9E44-A84C415A6172} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Detected: 3

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|036DFF981B9FD2C6613388366C44B161 (Trojan.Lameshield) -> Data: C:\ProgramData\036DFF981B9FD2C6613388366C44B161\036DFF981B9FD2C6613388366C44B161.exe -> Quarantined and deleted successfully.

HKCU\Environment|AVAPP (Rogue.PersonalAntiVirus) -> Data: C:\Program Files\PersonalAV -> Quarantined and deleted successfully.

HKCU\Environment|AVUNINST (Rogue.PersonalAntiVirus) -> Data: C:\Program Files\Common Files\Uninstall\PersonalAV\Uninstall.lnk -> Quarantined and deleted successfully.

Registry Data Items Detected: 3

HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.

HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.

HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.

Folders Detected: 3

C:\Program Files\Common Files\Uninstall\PersonalAV (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.

C:\Program Files\Adware Professional (Rogue.AdwarePro) -> Quarantined and deleted successfully.

C:\Program Files\PersonalAV (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.

Files Detected: 4

C:\ProgramData\036DFF981B9FD2C6613388366C44B161\036DFF981B9FD2C6613388366C44B161.exe (Trojan.Lameshield) -> Quarantined and deleted successfully.

C:\Users\Sorelle\Downloads\SpeedScan_setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.

C:\Program Files\Common Files\Uninstall\PersonalAV\Uninstall.lnk (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.

C:\Program Files\Adware Professional\nutilities.dll (Rogue.AdwarePro) -> Quarantined and deleted successfully.

(end)

Thanks again!

[Maniac]

Thanks!

Very good!

Some malware prevention tips here:

http://forums.malwarebytes.org/index.php?showtopic=104379

Safe surfing!

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!