Persistent Platte Services - How do I delete?

I have a persistent pop up from Platte Services demanding money I don't owe.
It has invaded my desktop too and keeps returning after I delete the
shortcut.

Address in browser is: file:///C:/1276849409/LkgBDKxYQlhbHeKf.htm

I cannot find this file. Showing hidden files and using Vista search
reveals nothing.

How do I get rid of this little cheeky menace? Firewall is on, normal full
security, Windows Defender etc., etc.

On Tue, 12 Aug 2008 12:17:14 +0100, Bill wrote:

> I have a persistent pop up from Platte Services demanding money I don't owe.
> It has invaded my desktop too and keeps returning after I delete the
> shortcut.
>
> Address in browser is: file:///C:/1276849409/LkgBDKxYQlhbHeKf.htm
>
> I cannot find this file. Showing hidden files and using Vista search
> reveals nothing.
>
> How do I get rid of this little cheeky menace? Firewall is on, normal full
> security, Windows Defender etc., etc.

Try here for assistance:
http://www.theeasypc.co.uk/wordpress/?tag=platte-media

Bill wrote:

> I have a persistent pop up from Platte Services demanding money I don't
> owe. It has invaded my desktop too and keeps returning after I delete the
> shortcut.
>
> Address in browser is: file:///C:/1276849409/LkgBDKxYQlhbHeKf.htm
>
> I cannot find this file. Showing hidden files and using Vista search
> reveals nothing.
>
> How do I get rid of this little cheeky menace? Firewall is on, normal
> full security, Windows Defender etc., etc.

You've definitely picked up a nasty bit of malware. There isn't much about
it pointing to definitive removal steps (Google search), so I'd start with
the standard methods:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/...moving_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

The batch file from the reference theeasypc 'remove.bat' did the job quickly
and cleanly.

Phew

Thanks!

"Gotde T Shirt" <> wrote in message
news:jtc0yc28106f$.19lzgcg290c3f$... .
> On Tue, 12 Aug 2008 12:17:14 +0100, Bill wrote:
>
>> I have a persistent pop up from Platte Services demanding money I don't
>> owe.
>> It has invaded my desktop too and keeps returning after I delete the
>> shortcut.
>>
>> Address in browser is: file:///C:/1276849409/LkgBDKxYQlhbHeKf.htm
>>
>> I cannot find this file. Showing hidden files and using Vista search
>> reveals nothing.
>>
>> How do I get rid of this little cheeky menace? Firewall is on, normal
>> full
>> security, Windows Defender etc., etc.
>
> Try here for assistance:
> http://www.theeasypc.co.uk/wordpress/?tag=platte-media

I am having a really tough time getting rid of this.
I can't just delete the files, because "I don't have permissions" eve
when logged in as Administrator, and tried to change permissions i
'security' tab under properties.
PC Advisor forum detailed a program you could write in notepad and sav
as a .cmd file. Running this as administrator it returns 'Access Denied
when trying to delete the two files 'pm_proc1.exe' and 'pm_proc2.exe
from the Windows/system32 folder.
and to top it all off www.theeasypc.co.uk site is down, or doesn'
exist any more.
Please help.

Jimothe

--
mr ji
-----------------------------------------------------------------------
mr jim's Profile: http://forums.techarena.in/members/mr-jim.ht
View this thread: http://forums.techarena.in/vista-help/1019113.ht

http://forums.techarena.i

UPDATE:

I have managed to get rid of all the files by using 'Malwarebytes'
Anti-Malware'
this picked up on the files as a threat, but couldn't delete them.
Another tool provided with this is called 'FileASSASSIN' and claimed to
delete locked files. So I thought I had nothing to lose, so ran the
tool, found the files and hit the delete key, and low and behold they
deleted straight away!
I have rebooted my system and nothing comes up, so I hope that has got
rid of the darn thing.


--
mr jim
------------------------------------------------------------------------
mr jim's Profile: http://forums.techarena.in/members/mr-jim.htm
View this thread: http://forums.techarena.in/vista-help/1019113.htm

http://forums.techarena.in

"Bill" wrote:

> I have a persistent pop up from Platte Services demanding money I don't owe.
> It has invaded my desktop too and keeps returning after I delete the
> shortcut.
>
> Address in browser is: file:///C:/1276849409/LkgBDKxYQlhbHeKf.htm
>
> I cannot find this file. Showing hidden files and using Vista search
> reveals nothing.
>
> How do I get rid of this little cheeky menace? Firewall is on, normal full
> security, Windows Defender etc., etc.
>
>