Question

Locked

Am I Being Spied Upon?

By mahogany44 ·
My HP laptop is a recent purchase with Vista and Norton 360. Over the last two days, a pop-up appears from a source I am unfamiliar with. Norton doesnt seem to be able to remove it. When I originally opened it said it could not be removed as it was attached to my IP. When checked my IP has a v.long alphanumeric reference preceding it. Is this relevant? How can I remove this pop-up?

This conversation is currently closed to new comments.

20 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Answers

Collapse -

All of us are being spied upon by someone or something..

What you need are these:
Spybot:
http://www.safer-networking.org/en/index.html
Ccleaner:
http://www.ccleaner.com/
Popup blocker:
http://www.registry-cleaner.net/pop-up-blocker.htm

Run these and you should be sorted.

Please post back if you have any more problems or questions.

Collapse -

Just remember to run them in

by OH Smeg In reply to All of us are being spied ...

SAFE MODE so that what they find can be removed.

To get into Safe Mode press the F8 Key between the POST Screen and the Windows Loading Screen. When you get the White on Black use the arrow keys to highlight Safe Mode not Safe Mode with Networking just Safe Mode and then press enter. You will then load Windows without any Network Drivers Running and this will then be able to delete the nasties.

Col

Collapse -

In Safe Mode

by mahogany44 In reply to Just remember to run them ...

Thank you and BT for prompt replies on Sunday. Immediately installed Spybot and Ccleaner and run daily to no avail. Pop-up persists. When closed, resides as a shortcut on desktop until binned. There is no apparent program file to which it relates. My knowledge is limited and I am at a loss.
Would you guys care to suggest a Plan B?

Collapse -

What path is shown

by IC-IT In reply to In Safe Mode

When you right-click the file, Choose Properties, Shortcut Tab, The Target line?

Collapse -

What path is shown

by mahogany44 In reply to What path is shown

bwilmot as requested:

Target (& 'type' the same) :

https://secure.platteservices.com

Locale: Internet

Collapse -

It is a portal for media services (and a ripoff)

by IC-IT In reply to What path is shown

Allegedly someone voluntarily tried their free trial and now they want you to pay for services or removal.
You can read more here;
http://michaelpollitt.com/wordpress/?p=177

You can watch a video or follow this persons removal process. Video etc here;
http://www.theeasypc.co.uk/wordpress/?tag=platte-media

Or just try this.

1 First of all open My Computer > C > Windows > System32
2 Scroll down to PM_proc1?. (in alphabetical order).
3 Open ?Task Manager? by press Alt,Ctrl,Del in order at same time.
4 Click on the Processes tab at the top of the window
5 Find and ?End process Tree? the following two files PM_PROC1 & PM_PROC2 so they dissapear from task manager (some times you need to do this in safe mode)
6 Close task manager
7 Click Start, Run, and type regsvr32 -u pm_dll.dll
8 In the windows thats browsing c:\windows\system32 delete the files known as PM_PROC1 & PM_PROC2 along with any other file called PM_######
9 click Start, Run, and type in Regedit
10 Press F3 and type PM_PROC and click the find next button. When it finds a result delete it
11 repeat step 10 again until you find 0/zero results.
12 Close all screens, and delete the icon off the desktop.
13 Reboot.
14 Ring them up and tell them to go swing and give them the url of this blog to say this is where i got it from
15 relax and enjoy and gloat about how your system is ?Platte Free?

Collapse -

It is a portal for ... (used up msg level!!)

by mahogany44 In reply to It is a portal for media ...

Superb ... :)

bwilmot : may I have an interpretation of "go swing"?

... now I'm going to do this immed. You're clearly residing on another part of God's green earth. It's now 7:10pm here. Will you be online for a while? This stuff is new to me.

Collapse -

No problem

by IC-IT In reply to It is a portal for media ...

I will be checking every now and then (dang work interfers sometimes :-) ).
To continue posting in the same line just reply to my above post. The message only means that it will not parse to the right any more.
If you go to my second link (above) You can download the .bat file (just as PT pointed out). If you scan that link you will see that they also have a download that helps take control of processess (just above the manual removal method).

Collapse -

Ok, what does the pop up read or say.

From this we will be able to check it for you.
Have you tried the pop up blocker?.

Please post back if you have any more problems or questions.

Collapse -

Ok, what does the pop up read or say

by mahogany44 In reply to Ok, what does the pop up ...

Its seems to be an online bill for access to a site which is not clear. Company called Platte Media. It simply refuses to stay dead.

Yes, have Yahoo blocker and Norton 360 running. Apparently to no avail.

Back to Malware Forum
20 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums