Live Security Platinum

KieranMoore

Hi,

I have a Vista 64 machine with BitDefender 2011 running on it. There are several user accounts on the machine, and my 10 year old daughter somehow seems to have infected her account with the Live Security Platinum trojan, despite BitDefender 2011 (automatically updated!) running on the machine.

I have run a deep scan using BitDefender, and nothing comes up. I have also used SpyBot Search & Destroy, and also nothing comes up.

In Windows normal mode, on daughter's account, Regedit and Task Manager are both disabled by Live Security Platinum.

In Windows safe mode, I can't use BitDefender, so, what are my options? I am extremely competent, having written Windows programs for over 20 years, and am happy working through the registry etc if someone can give me a list of keys to modify or delete.

So, any ideas?

Oh, and why is Live Security Platinum not picked up by Bitdefender??????????

Regards,

Kieran

rootkit

Hi Kieran

Welcome to the forums!

In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe

. Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Send me via PM the generated log file.

. If the file is to big for send it over PM, upload the results to one of the online file hosting servers mentioned below or use one of your own and send via PM the download link.

http://www.sendspace.com

http://www.mediafire.com

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE REAL-TIME PROTECTION on Bitdefender 2011]

In order to disable the real-time protection please open Bitdefender, click the "Options" button in the upper right side of the interface, Switch UI to "Expert View"; Go to "Antivirus" > "Shield" and click on "Real-time protection is enabled", select the time interval that suites your troubleshooting needs and click "OK" (the message will change to "Real-time protection is disabled"). The real-time protection should be enabled after performing the troubleshooting procedure.

[How to create a screen shot]

On Windows, press the Print Screen or Prnt Scrn key on your keyboard, found at the upper right of the keyboard. This key will capture the entire screen. Open up your paint program -click on "Start-> All Programs-> Accessories->

Paint". In the paint program, select File/New, then Edit/Paste. Then save the file and attach it in your PM message.

If the file is to big for send it over PM, upload the results to one of the online file hosting servers mentioned below or use one of your own and send via PM the download link.

We will get back to you as soon as the analysis is complete. Have a nice day.