Antivirus Live

Threat Information: Antivirus Live is rogue security application which is related to the notorious rogue programs Antivirus System PRO and Spyware Protect 2009. It uses scare tactics to try and induce users into paying for its license. Antivirus Live reaches the user’s system via Trojans that get downloaded along with other malicious software as well as fake video codecs. Once installed, Antivirus Live blocks Windows utilities such as Task Manager and Registry Editor to prevent the user from attempting to remove it. It also performs a large number of fake security scans on the system and comes up with a lot of fake infections which it claims are plaguing the user’s computer. Antivirus Live also displays fake warning pop-ups from the Windows taskbar. By installing a Browser Helper Object, Antivirus Live hijacks the user’s web browser and then gives the user fake warnings that their privacy is about to be invaded while blocking access to legitimate antivirus websites. The aim of all this activity is to try and get the user to purchase a license to the ‘full’ version of Antivirus Live by claiming that the currently installed ‘trial’ version is insufficient to remove all the detected ‘threats’. However, the so-called ‘full’ version of Antivirus Live is just as incapable of cleaning out any computer system as the ‘trial’ version is.

Antivirus Live

» Download Antivirus Live Removal Software

As soon as you find a copy of this malicious software on your computer, you should take steps to remove Antivirus Live. Antivirus Live removal is a process which involves the stopping of processes, deletion of files and folders and the removal of registry entries.

Automatic Antivirus Live Removal

We do recommend Spyware Doctor with Antivirus. This is one of the few clients out there that can really make a big difference.  The problem most people will have is your fake client may block the install or updating of a real security product.  You can always start of following the manual guide below.  Once you terminate the running processes of this virus you should be able to install the client just fine. If you follow the link above and use coupon code removevirus10 you will get 10% off. This is an exclusive coupon we got just for removevirus.org readers.

Online Antivirus Live Removal Service

Sometimes you just need a pro.  If you are having troubles and do not understand the below guide or just feel better having an expert removing this threat and all others on your computer then we recommend www.onlinecomputerrepair.org.  It's one of the leading remote computer repair companies out there and will get you taken care of.

Antivirus Live Manual Removal Procedures

The first step you need to take in order to delete Antivirus Live is to stop the following process:

• [random]sysguard.exe, for example mscqsysguard.exe

The next step in Antivirus Live removal is to delete the following files and folders:

• %UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\
• %UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\[random]sysguard.exe
• %UserProfile%\Local Settings\Application Data\
• %UserProfile%\Local Settings\Application Data\sysguard.exe

After these steps have been completed, Antivirus Live no longer resides on your hard disk. While completing this step it is recommended to also conduct a full system scan of your PC using genuine antivirus software such as Spyware Doctor with Antivirus in order to make sure that no additional threats reside on your PC.

If you find this threat too hard to remove yourself and need an expert we recommend www.onlinecomputerrepair.org . They charge far less than others and are great at what they do.

Antivirus Live Registry Removal Proedures

Removing files and folders alone is not sufficient to completely remove Antivirus Live. The following keys and settings should also be removed from the Windows registry to complete Antivirus Live removal:

• HKEY_CURRENT_USER\Software\AvScan
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"

Once all these steps have been completed, your system is safe from Antivirus Live.

Antivirus Live Directories:

• %UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\
• Vist and Windows 7 Users: C:\Users\%UserName%\AppData\[RANDOM CHARACTERS]\

Conclusion

It is not recommended for inexperienced users to attempt to delete Antivirus Live manually, as any mistake made during removal could result in your system getting damaged. Therefore, inexperienced users are advised to use a web-based repair service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus to completely and safely remove Antivirus Live.

Other Software clients that Removevirus.org likes to use

• Spyware Doctor with Antivirus
• Norton Review
• Trend Micro Review
• Kaspersky Review
• AVG Review
• MalwareBytes Review

As always please post updates to the file traces. If yours are different then other users will find it helpful.