Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Struck by Live Security platinum

15 Aug 2012   #11

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Quote   Quote: Originally Posted by masplin View Post
I have run Malware, Rootkiller, Windows Defender offline (which found some things to remove).
Do you remember the name of these items it found? The name of these viruses will be a deciding factor in what actions you should take.

Some viruses do remove restore points or deny access to them. And they also like to embed themselves in restore points, usually the first one. If you can access a restore point after an infection, it's best to go back 2 or 3 points. Unfortunately, some viruses corrupt the entirety of restore points.

You could try the restore point in Feb, but that does seem odd there are no others, since you've no doubt had updates from MS and they, by default, make a restore point before installing.


My System SpecsSystem Spec
.

15 Aug 2012   #12

Windows 7 Pro. 64/SP-1
 
 

Personally I would not use any restore point because they can be infected. I also would not use any back ups that where made any where the time of the found infection. Infection can be installed with a time delay or a action related start. Example: When and if you hit the Windows Flag Key you could activate the infection. It could be anything along that line.
My System SpecsSystem Spec
15 Aug 2012   #13

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Good point Layback. This is why when I make system images, I keep the last 4 of them on file so that if I do inadvertently make a backup with a virus, I can go back even farther.

When was this system image made? Was it made before or after the infection?

Being that the only restore point you have is Feb, it's a good chance your restore points are infected.
My System SpecsSystem Spec
.


15 Aug 2012   #14

Windows 7 64 bit
 
 

Unfortunately I didnt write down the files Windows Defender found. Would they be logged somewhere if I restart it?

The image is July 9th so fairly recent in that there wont be many changes, but before the infection which was 2 days ago. However I only take a system image of my C drive that is on an SSD and contains just OS and programs. I moved the user files to a seperate HD in a "U" partition partly becuase of space and partly I was advised by this forum it was good practice. The "U" drive gets backed up daily with windows backup to another HD. I saw some of the virus files had paths on this U drive so wondering if just restoring my C drive with the image is going to be sufficient?

I'm not sure if I delete my wife's the user account and recreate it could I then restore her user files from the day before infection?

Thanks Mike
My System SpecsSystem Spec
15 Aug 2012   #15

Windows 7 64 bit
 
 

Hmm oddly I can now access files on 2 of the other 4 pcs so maybe this isn't an issue caused by the virus. I'm not quite clear where the Diagnostic policy server comes into it...is it just for diagnosis when it doesn't work?

sounds liek the advice is to do the systme image restore anyway to be on the safe side.
My System SpecsSystem Spec
15 Aug 2012   #16
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Open an elevated command prompt, then type or copy/paste:

net localgroup Administrators /add networkservice
press enter
then type:
net localgroup Administrators /add localservice
press enter
then type:
exit

press enter and restart your computer

Open services and make sure the service is started.
My System SpecsSystem Spec
16 Aug 2012   #17

32 bit
 
 

please download Downloading Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
    • Windows Update
    • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.
My System SpecsSystem Spec
16 Aug 2012   #18

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

It might be wise to re-run Windows Defender Offline, just to verify that nothings left on your system. If it finds anything, write the name down.

WDO is good at getting a lot of things, however it can not remove certain items, including some rootkits. If you've been infected by the Sirefef rootkit, MS is recommending a clean install as this alters some of the OS files & leaves them in a irreparable state.
My System SpecsSystem Spec
16 Aug 2012   #19

Windows 7 64 bit
 
 

Think i was getting my knickers in a twist with network access as sorted out by rebooting the other machine. So currently it al lseems happy. I'll rerun WDO and assume if there are any outstanding issues it will at least find them even if it cant remove them?
My System SpecsSystem Spec
16 Aug 2012   #20

Windows 7 64 bit
 
 

Slightly related. My wife was running MSE. I have Kapersky as had a 3 year licence which is just coming to expiry. i was going to let it expiry and just run MSE unless Kapersky is any better at stopping this sort of thing? I was under the impression MSE was as good as any of the paid solutions.
My System SpecsSystem Spec
Reply

 Struck by Live Security platinum




Thread Tools



Similar help and support threads for2: Struck by Live Security platinum
Thread Forum
Happy 50th birthday, Compact Cassette: How it struck a chord for milli Chillout Room
Live Security Platinum virus strikes System Security
Twice BSOD struck in 3 days NETIO.sys BSOD Help and Support
Solved Just installed Windows 7, struck on Generic VGA Graphics Adaptor. Graphic Cards
Lightning struck my comp, what to do? Hardware & Devices
Thunder Struck General Discussion
Microsoft Security Essentials is live!! News

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:34 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33