The biggest problem about Antivirus Live is that it protects itself quite effectively and blocks almost all programs. I'm not even talking about anti-virus software. The virus blocks anti-virus/spyware software in the first place. It also hijacks Internet Explorer and changes Proxy Settings so that the only working website is Antivirus Live home page and purchase page. The rogue program displays an error message when you try to removal tool. That warning reads:
"Application cannot be executed. The file [program].exe is infected.
Do you want to activate your antivirus software now."
AntivirusLive will also impersonate Windows Security Center and will "push" you into paying for the bogus software. Rememeber, this is a scam. Let me show you how to remove Antivirus Live manually for free.
Removal instructions (Print out these instructions if you can because you may have to close this window)
-----------------------------------------------------------------------------------------------------------
1. Start your computer is "Safe Mode with Networking". To get into the Windows Safe mode, as the computer is booting press and hold your "F8 Key" which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to move to "Safe Mode with Networking" and press your Enter key. Read more detailed instructions here: http://www.computerhope.com/issues/chsafe.htm
2. Delete Antivirus Live process:
1) Download HijackThis (NOTE: rename HijackThis.exe to explorer.exe before saving it to desktop). Launch the explorer.exe and click "Do a system scan only" button.
2) Search for similar entries in the scan results:
O4 – HKCU\..\Run: [warsazlf] C:\Documents and Settings\user\Local Settings\Application Data\asoksd\saqpsysguard.exe
The process name will be different in your case. But it has the same structure: [RANDOM]sysguard.exe
Select all similar entries and click once on the "Fix checked" button. Close HijackThis tool.
3. Download SUPERAntispyware or MalwareBytes Anti-malware and run a system scan.
-----------------------------------------------------------------------------------------------------------
Additional step: How to fix Internet Explorer proxy settings (for those you don't have any other browser and can't download removal tools).
In Internet Explorer go to: Tools->Internet Options->Connections tab.
Click Lan Settings button and uncheck the checkbox labeled Use a proxy server for your LAN. Click OK.
Other useful removal tips:
- Start Windows in "Safe mode"
- Search your PC for (sysgaurd.exe) and make sure you check on "Search hidden files and folders" from the "Advanced options"
- Delete all files contain [RANDOM]sysguard.exe, for example: saqpsysguard.exe
- Download and scan your PC with Malwarebytes Anti-malware
More useful info:
http://ca.answers.yahoo.com/question/index?qid=20091224104009AA40wbo
http://www.wikihow.com/Manually-Remove-Antivirus-Live-Malware
Antivirus Live removal video (other method than stated in this page):
How to remove Antivirus Live? Help with getting rid of this virus
4/
5
Oleh
soni agus
