scary

[Platte_making_me_ill]

I am totally new to thread, Forum, post, Blog.... sounds totally foreign language to me.

 

I am a lastest victim of Platte Media. Only heard about the company from a pop-up invoice. Have no idea how it get my computer infected. I did not sign up to any company or download any film. I don't even know how to download. Never trust any thing called free (Extreme Tech Support - Free PC Help is my first try). Only just bought my computer for a few months and still learning to use the basic.

 

Found the virus files by don't know how to remove them. Found the removal program but don't know how to run it. That is why I am here and now I am going to learn more about computer so that I can protect my child when she starts using it.

[Platte_making_me_ill]

Platte Infection

 

I have already tried the The EasyPC Company UK Blog Archive Platte Media, AKA Platte Secure, AKA MBS but did not fully understand what I was doing and only managed to delete one entry (should be more ). Can I then try the Malware scanner? I am using Vista. Is there any different in the instruction?

[BeeCeeBee]

Hi and welcome to Extreme Tech Support - Free PC Help

 

First off while I know that things can get scary :eek: we are not one of them and we are free :) and really are here to help.

 

So lets get started and get you posting. Just go the the forums page , the home page and pick a heading that seems to fit and dont worry if you get it wrong.

 

In your case you feel that you have been infected with something without your knowledge. Hmm That sounds like malware so go to the forum marked malware and open it.

 

Now just click on where it says new thread and ask your question or state your problem. Don't worry about not knowing the terms or any special language just be as clear as you can and we will pick up from there.

 

It really is that easy and we are glad you found your way to us.

[RandyL]

Hi Platte.

The malware scan that Platte refers to is our guide which he has seen on another thread.

 

Yes Platte the programs will work just fine on Vista. Just make sure to follow all the steps. Printing them will make it easier to follow.

 

Also can you explain everything you have done so far in trying to remove this infection?

 

• Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
  It is a combination of the words malicious and software.
  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.
  

• Required Cleanup Steps
  1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
     
  2. Run a Temporary file and cache cleaner (ATF)
     
  3. Run 2 Anti-Malware scanners (Listed Below)
     
  4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
     
  5. Clear out old System Restore points
     
  6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.
     

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

 

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

 

 

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif

 

____________________________________________

STEP 1

• Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
  1. Run Spybot-S&D in Advanced Mode.
     
     
  2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
     
     
  3. On the left hand side, Click on Tools
     
     
  4. Then click on the Resident Icon in the List
     
     
  5. Uncheck "Resident TeaTimer" and OK any prompts.
     
     
  6. Restart your computer.
     
     

__________________________________________________

STEP 2

• Follow these instructions carefully.
  
  
• Download ATF-Cleaner from
  Snapfiles.com
  to remove un-needed temporary files from your computer that may contain malware.
  
  
• You can also download it from
  Majorgeeks.com
  
  
• When you run ATF-Cleaner, check the items as shown below for Main.
  
  
• For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  
  
• NOTE:
  If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  
  
• Then click on "Empty Selected".
  
  

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif

.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif

__________________________________________________

STEP 3

• Install and run the free version (not the Professional version) of SUPERAntiSpyware from
  SUPERAntiSpyware.com
  
  
  • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    
    
  • You do not have to send them your e-mail address, just click next.
    
    
  • You can leave the automated check for updates on.
    
    
  • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    
    
  • DO NOT
    allow SUPERAntiSpyware to protect your Home Page settings.
    
    
  • On the
    Top Left
    select the
    Scan your computer
    button.
    
    
  • Make sure there is a CHECK MARK on all
    Fixed Drives
    .
    
    
  • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.
    
    

__________________________________________________

STEP 4

• Install and run
  Malwarebytes' Anti-Malware
  from
  Malwarebytes - (direct download)
  
  
  • Accept all defaults for the installer
    
    
  • Allow the program to update the definitions
    
    
  • Click on the
    Quick Scan
    and click Next.
    
    
  • If any items are found allow it to clean them and then Reboot your computer.
    
    

__________________________________________________

STEP 5

• Run an online scan with ESET from
  Free Virus Scan: Use ESET's Online Antivirus Scanner
  
  
  • You
    must
    use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
    
    
  • If your computer is running Window's Vista, then you
    must first
    start Internet Explorer as an Administrator. To do so, right-click on the
    Internet Explorer
    icon in the Start Menu and select "
    Run as administrator
    " from the popup context menu.
    
    
  • Accept the terms and click "Start".
    
    
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
    
    
  • Click "Start" to begin the scan.
    
    
  • When completed restart your computer
    
    

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to

Extreme Tech Support - Free PC Help

and tell us how the computer seems to be operating.

At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

 

If required this is the download link for

TrendMicro™ HijackThis™

Unless instructed to by the Technician helping you then do not download this tool.

 

Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.

Please follow the instructions here

How to turn off and turn on System Restore in Windows XP

How to turn off and turn on System Restore in Windows Vista

[Jack Hackett]

Platte Removal

 

Part One

1. Open ‘Task Manager’ by pressing Ctrl, Alt, Del together.

the task manager window opens

2. Click on the Processes tab at the top of the Task Manger window

3. Find and ‘ End process Tree ’ for the following two files

PM_PROC1

PM_PROC2

so they disappear from Task Manager

4. Close Task Manager

 

Part Two

1. Click Start - Run type in regsvr32 -u pm_dll.dll - OK

2. Click on Start - Run type in %systemroot%\System32

the system32 folder opens

3. In this System32 folder scroll down to the files named PM_PROC1

PM_PROC2

along with any other files called PM_###### and delete them.

 

Part Three

1. click Start - Run , and type in Regedit

the registry editor opens

2. Press F3 and type PM_PROC and click the find next button. When it finds a result delete it

repeat step 2 again until you find no more results.

3. Close all screens, and delete any platte icons off the desktop.

4. Reboot.

 

Relax and enjoy your Platte free system

[Platte_making_me_ill]

Appreciation

 

Hello, everybody,

 

I really appreciate your kindness. After reading the posts, bring tears to my eyes and trust in people again. Nightmares just keep chasing me after I bought my computer. Only just manage (still on going) to deal with my internet Service Provider AOL which causes me more than a year of stress.

 

About the troubles, I tried to run remove.bat (from Easy PC) for Vista but only managed to delete one entry. Then it highlighted "ab-plsi" in the Registry Editor not beginging with PM_ , so I did not delete it. Then it showed "Finished..." Those pm_ ### files are still in Windows\System32 and I could not delete them.

 

I could not manage to watch the vedio about steps to remove PM. Try to (not sure correctly) download codec but still can watch it. The error message is "Window Media Player cannot play the file. The Player might not support the file type or a required codec might not be installed on your computer (Close) (Web Help) "

 

Downloaded ibproc.exe but how to kill the processes off? I can only manage to find Windows\Systems\hkcmd.exe to highlight but not the rest as in the shown window.

 

That is all I tried so far and the pop-up still coming and the "Platte Account" icon keeps reappearing on my desktop. My new computer is extremely slow now.

 

Going to buy a printer or go to the library to print out the instruction to try to run the Malware scanner.

 

For the moment , am I safe to carry on using my computer? Can the virus files do any more damages if I switch the computer on?

 

Thank you again.

[BeeCeeBee]

Hi Platte ( I keep thinking of you as Scary) perhaps you should change your name after this is solved and stay with us.:)

 

You are probably not doing any more harm by continuing on the pc but what you have recommended to yourself is the wisest move.

 

Print the directions and follow them, then get back to us ASAP after you are done.

 

There is no point in dealing with individual symptoms until we see what, if anything is left to resolve after all the scans etc. It really is a painless and easy process to follow just do it step by step. :D

[Platte_making_me_ill]

hello, kind people,

 

Sorry I think I click "Post Reply" instead of "Quick Reply" by mistake and not sure what happened to the reply I typed and send.

 

I keep having trouble to post a reply.

“The following errors occurred with your submission

1.You do not have permission to perform this action. Please refresh the page and login before trying again.“

If I don't know what SPYBOT or TEA TIMER are, can I assume they are not installed and got to step 2?

 

To download (this is a very scary word to me), click the link to Snapfiles.com and click the download button.

 

Please teach me how I can be sure it's safe to download and genuinely free (I never trust this word and never dowmload any update from Microsoft Windows).

 

When click the download button for the ATF Clearner, a window:

Internet Explorer Security

A website wants to open web content using this program on your computer.

This program will open outside of Protected mode. Internet Explorer's Protected mode helps protect your computer. If you do not trust this website, do not open this program

Name WEB## 1.13.1.223

Publisher : ShenZhen Thunder Networking Technol..

(Allow) (Non't Allow) should I click allow?

 

After clicking download, in the window,

File Download

(Open) (Save) (Cancel) which button to click?

 

When download complete, what do the buttons (Open) (Open Folder) (Close) mean?

 

After downloaded, how to run the file? Do I need to switch off the computer and on again ?

 

Thank you.

 

Platte_making_me_ill

[BeeCeeBee]

Hi Platte

 

Lets take things one at a time.

 

Either way, "quick" or "post reply" will do. Quick reply is is text only (no smileys etc.)

 

You certainly have permission to post so you may have just hit something by mistake. Don't worry about it unless it keeps happening.

 

Spybot is a very common antimalware program and Teatimer is part of it. If you don't use it there is nothing for you to do and skip that step.

 

Now let change the order of things a bit. While we all agree that you should not just download things without thinking it through, downloading files and programs is an integral and often fun part of using your PC. The key issue is trust. If you trust the site it is almost always safe. Every link we give you that is from a Extreme Tech Support - Free PC Help Staff member is well tested and safe.

 

You are making a major mistake by not downloading Microsoft Updates and should do so automatically. They are designed to protect you. There is no reason to distrust them. There are no absolutes when it comes to safety and it is always a good idea to try to check out a site first. This may be of help to you and is part of our recommended software

 

SiteAdvisor

 

The ATF cleaner is also safe or we would not recommend its use as part of the program just follow the directions and let it run clicking the boxes that show in the diagram.

 

Finally when downloading in general you are usually given 2 choices. If you choose "run" the program it will simply download and and open up on your computer.

 

If you choose "save" it will place the file in a folder you designate for you to open and run later. Many people feel that is the safer alternative where you are not sure of the source. That is not always the case.

 

It is a good Idea to check back here before downloading anything (free or not) that is promising to fix your problems. There is a lot of junk out there that can do you more harm then good.

 

The bottom line is that you can never be perfectly safe but if you have the right protection on your computer you should be fine. Please refer to our recommended security products and choose from them, not all of them.

 

http://extremetechsupport.com/forum/malware-removal-av-firewalls-etc/3597-free-pc-help-recommended-security-products.html

 

I am not sure that this answers all your questions but you really should first follow through with the anti malware program and get the windows update ASAP!!

 

Do those things first and let us know how things stand!

Edited November 22, 2008 by BeeCeeBee

[Platte_making_me_ill]

Thank you so much. Will certain try to run it as soon as possible.

 

Both of me and my child are sick. We are smoking drug patsitively from my next door neighbour. The smoke is flooding into our flat. I have a lot to deal with for the moment. We have been coughing for 3 weeks.

 

Thank you again. Definately will run it when I am feeling a bit better.

[Platte_making_me_ill]

Click download at Snapfiles.com for the ATF Cleaner. It starts a little bit but freeze and with the message

"Please wait... contacting download location!

Your download will start momentarly. If it does not, click here. ( With the green squares do not seems to move it all).

 

Click "click her", after waiting for 20 minute, another window comes up and askes (start to download) (Cancel). Click start to download and wait, but nothing seems happening.

[BeeCeeBee]

Hi again,

 

I just tried and the site is a bit slow but not as slow as you are reporting. Just keep trying. There is another site listed where it can be found Majorgeeks.com but because you are so new at this I would prefer that you stick with the snapfiles. The other can be a bit overwhelming and you may find yourself downloading the wrong thing.

 

 

Also because I do not want you to get confused, I believe that there is no option to just run the program and it may ask you if you want to save it. Just say yes and save it to your desktop. You can always delete it when you are done.

Edited November 22, 2008 by BeeCeeBee

[Platte_making_me_ill]

Hello,

I have the same problem at step4, click the button to download mbam-setup.exe, then a a window comes up and asks to start download or cancel. I clicked start download. Waited 25 minutes, nothing seems to happen so click the X box and start Step 4 by clicking the download button again.

 

How can I tell it is downloading? Do I need to leave the window which asking me to start downloading for even longer? An hour?

 

To reboot is just switch off and on again , right?

 

Thanks

 

PS. I start to see the fun part especailly when it's scanning with the number keeps changing. The same feeling like parenting : I love my kid, but still learning to show my affection.

[BeeCeeBee]

There are 2 possibilities here. (actually more but we will take 2 at a time :))

1. When you start to download does a yellowish bar appear at the top of your browser warning you of a download. If it does you have to click on it and allow download from that site.

I am not saying you should get that bar but it sometimes goes unnoticed if and when it does appear.

 

2. The very problem that you are trying to solve may be what is slowing down or stopping the download. If it does not start downloading the go back to the malware post and start it again by clicking on the link or refresh the page before you try to download again.

 

PLEASE tell me that you did not mean "switch off" literally. Always shut your computer down from the start menu. Cutting the power at the switch is always a last resort.

 

You will learn to love it, and hate it , and love it again. Don't worry

Edited November 23, 2008 by BeeCeeBee

[Platte_making_me_ill]

hello,

 

I did try repeatedly, this time waited 50 minutes but still nothing seems to start the downloading.

 

Yes there is a window asking me whether to allow the download or not. Then another window asking to Start Download or Cancel. Then nothing seems happening.

 

How to refresh a page?

 

No , I always close all applications, then go to Start, Shut Down, then switch all elecetricity (particularly the internet one to avoid any "illegal" activities). And then power on and log in. Is this called To Reboot?

[BeeCeeBee]

OK yes that is rebooting. A bit of harmless overkill but no problem.

 

Step 4 is Antimalware bytes. It should ask you if you want to save this file you click yes and location guide will drop down get desktop in the box and click save. It may then ask you to allow the download.

 

Are you having any trouble getting here to free PC Help?

Edited November 23, 2008 by BeeCeeBee

[Platte_making_me_ill]

At step 4, after clicking allow to download and Start Download, nothing seems to happen. No window comes up to ask to save or run at all.

 

I go to my e-mail box and click the link to come to this page. Because I don't know how to come to this page in this forum.

 

How to refresh a page? Is it a button somewhere to click?

[BeeCeeBee]

lets do some basics here.

 

You must be using Internet Explorer that came with Windows. All the way at the top just below where the 3 little boxes are to make the browser full page or minimised there is a little symbol with 2 green arrows one up one down. If you click on those arrows it will "refresh"or reload the page you are on.

 

Now when you are at our forum go to where it says favorites and click on it. I will give you an option to save this page to favorites and then whenever you hit favorites we will be there. That process is usually referred to as "bookmarking."

 

This is not solving your problems though.

 

What I want you to do is forget everything for a while and leave the antimalware alone for a bit and get your browser up to date.

 

Go to start then settings and then control panel. I do not have a vista system so I am not sure exactly what the difference is but you must find control panel. Once you are in the control panel go to the security center and click on it. Go to automatic updates (on the bottom) get click where it says to go to windows update website.

 

When that site opens click Express and follow directions. That should hopefully at least get your browser in order and maybe make downloads work better. The updates may take quite some time because there will be a lot of them. Allow them all.

 

Once this is done try redoing everything on the malware program that has stalled on you before.

 

Good luck, we will be here.

Edited November 23, 2008 by BeeCeeBee

[Platte_making_me_ill]

When I was about to give up and log off, then find this window and asked me to run or save. So I did the step 4 and go on to step 5 before I read your latest post.

 

I tried to clicked on Internet Explorer icon and select "Run as a administrator" . Then a window MyStart by IncrediMail.com with a box to tpye in to search. I just clicked the X box and go back to this page to click the link at step 5. Then it shows

 

Error: Cannot initialize Online Scanner. Administrator right required.

 

Then another window mystart.incredimail.com/enlish (showing at the top),

(http://my.yahoo.com/ showing at the bottom) but the page is blank and keeps on running. I don't think this is anything to do with the download I want, right?

 

Now I am going to the Control Panel to try what you suggested in the lastest post.

[BeeCeeBee]

There is no question that you have some serious malware issues coupled with a well out of date browser. Get the browser up to date if you can and then you really should go through the entire process again.

 

If you cannot update we will have to deal with that as well but, fingers crossed , we can!

[Platte_making_me_ill]

I just did a update (did not take long, think I done it correctly).

 

Clicked Windows Update, Install updates, Apply. Then this Norton Security Scan comes up and found Cookie with 39 Threats Found. Click Fix Now, Get Protected, then there are a choice of price, so I clicked the X box to leave it.

 

Now should I carry on step 5 or start from the beginning?

 

Thank you so much for your help.

[Platte_making_me_ill]

I just retry step 5 again. Same error: Cannot initialize Online Scanner Administrator right required. But I did click Internet Exploror and selected "Run as adminstrator". What have I done wrong or missed?

[BeeCeeBee]

Hi Platte,

 

I want you to know that I am not alone in trying to help you here.

 

One of the things we strive for at Extreme Tech Support - Free PC Help is to make our advice as clear and understandable as possible no matter what level of expertise you have achieved.

 

You are faced with a bit of a dilemma. You seem to have managed to get a pretty serious infection or series of infections very early on in your computing life. There are things that can be done but they are going to be very difficult for you to follow

 

This is not your fault and it certainly has nothing to do with anything other then the fact that you are so new to this whole area.

 

There are a few choices that you have to make. You can do the easy route and simply take it in to a shop and get it repaired or you can try doing things step by step with us.

 

Before you select the latter it may be helpful if you perhaps have a friend who is a bit more advanced in computing. Not some computer ace but just someone a bit more familiar.

 

It is possible (probably likely) that we are going to suggest something called formatting which is basically starting over. If you do that you have to decide what important data you already have on your computer so that we can help you save it. (music, letters, photos etc.)

 

On the other hand there may be a few more steps that we can still try before that but they are going to be very difficult to follow.

 

It is just unfortunate that this has happened to you so early on.

 

I would appreciate your thoughts at this point.

Edited November 23, 2008 by BeeCeeBee

[Platte_making_me_ill]

Appreciate for everythings.

 

Will try to save all documents and photo in Documemt folder to disk. Because I am not sure where are everythings that I saved. Still learning where is a file is. But I shall try to save it and might be that will easy to start again rather to remove the virus.

 

Don't really feel safe to hand over my computer with my documents and personal details in it to a shop. So I shall try to save all documents first before I consider taking it to a shop.

 

I did have problems in the first month with my ex-new computer with Norton 360 installed. But AOL explained to me that it's known issue of Vista and they were rectifying it.

 

Thanks again for everythings.

 

Will try to save everythings tomorrow. Because it's been a long day (so is for you to help me!) .

[Plastic Nev]

I wish you the best of luck, and hope you manage to copy everything to disks. Once you are sure you have everything saved, Beeceebee will be back to help you through the format and re-install of the operating system.

Do you have either the manufacturers restore disk, or better, the complete XP system install disk?

The manufacturers restore disk will be a part of, or one of, the disks you got when you bought the computer.

Nev.