How to remove Antivirus Live

Friday, November 13th, 2009 at 6:57 am
Home » Rogue Antispyware » Antivirus Live

Antivirus Live description

Antivirus Live brings annoying pop-ups, slows the system down and it may hijack web browser. It requires paying for keeping the program and unfortunately some people buy the thing because it looks like a security tool.

AntivirusLive

Pop-ups loaded by Anti virus Live imitate infection alerts; this way AntivirusLive tricks victims into taking the tool as a virus remover. This rogue program is also able to imitate system scan. Antivirus Live may block access to the internet and report all the websites as insecure; it of course offers buying Anti virus Live for “safe browsing”. Don’t waste your money on a scam and erase AntivirusLive without hesitation.

Antivirus Live is a Rogue Antispyware software

How to manually remove Antivirus Live

To remove Antivirus Live spyware you must block Antivirus Live sites, stop and remove processes, unregister DLL files, search and delete all other Antivirus Live files and registry utility. Follow the Antivirus Live detection and removal instructions below.

The most typical software removal method is to remove Antivirus Live by using "Add or Remove Programs" service. However there may be hidden Antivirus Live files, running processes and registries in your computer, so Antivirus Live may recreate all other files after reboot.

Antivirus Live manual removal instructions

Block Antivirus Live sites:
awareremover2010.com
winsecurepro2010.com
os-guard2010.com
platinumantivir.com
ms-antivirus.net
desktop-antivirus.com
desktop-antivirus.microsoft.com
windows-antivirus.net
laptopantivirus.net
new-soft.net
winguard2010.com
spydetector2009.com
protectguru.com Read more how to block Antivirus Live sites

Stop and remove Antivirus Live processes:
sysguard.exe Read more how to kill Antivirus Live processes

Locate and delete Antivirus Live registry entries:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "" Read more how to delete Antivirus Live registry entries
Download RegistryBooster 2010 to scan errors caused by Antivirus Live

Search and unregister Antivirus Live DLL libraries:
iehelper.dll Read more how to unregister Antivirus Live DLL files

Detect and delete other Antivirus Live files:
%WINDOWS%\sysguard.exe
%WINDOWS%\system32\iehelper.dll

We strongly recommend you to use spyware remover to track Antivirus Live and automaticaly remove Antivirus Live processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

33 Responses to

Antivirus Live

  1. Scott
    December 22nd, 2009 at 12:59 pm

    After installing SD I can launch the application but I can’t click any buttons to start the scan after it launches. The same goes for when I try to run it in Safe Mode. Any ideas?

    Reply

  2. James
    December 23rd, 2009 at 12:33 pm

    Thank you so much :D

    Merry Christmas
    God Bless

    Reply

  3. Grace
    December 27th, 2009 at 1:51 pm

    THANK YOU SO MUCH!!!
    You saved me hours of research on how to fix it and gave me a peace of mind that i can continue my work.

    Peace!

    Reply

  4. Bryan
    December 28th, 2009 at 12:52 am

    Thank You so much. even if it took almost an hour… this helped… you saved me.
    Oh yea and, on the deleting registry entries, i didnt find the
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
    AND
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″

    But, it still worked.

    Reply

  5. Matt
    December 30th, 2009 at 10:14 am

    I can’t seem to do anything. I contracted antivirus live yesterday and it seems to have completely immobilized my computer. I’ve run a boot-time scanner and that didn’t seem to pick up on the AVL. While attempting to run windows in normal mode, AVL blocked every program I tried to run (Internet Explorer, Avast Antivirus, Control Panel) stating that the file was infected and could not be run.

    This thing has taken over my computer. Any other suggestions on how to get rid of it?

    Reply

    Luciana Reply:
    December 30th, 2009 at 11:52 pm

    You can still use manual removal guide to deal with this infection. The removal instructions are posted above the comments section of this page.

    Reply

    Joe Reply:
    January 15th, 2010 at 7:55 am

    In reply to Matt, I had this happen to me last night. Antivirus live installed itself onto my computer. I was completely imoblized. Any program, I clicked on to try and run, Antivirus live told me it was infected, And could not be run. It was the most hideous piece of malware Iv`e ever seen!!! I ran avast, But to no avail, As it did not resolve the program. Heres what I did, That got rid of that nasty beast once and for all. I rebooted my pc, And before the Antivirus Live icon appeared onto my desktop, I beat it to the punch!! I was able to start up my Lavasoft Ad-Aware. Ad-Aware removed that insideous beast once and for all :) )))

    Reply

  6. Z
    December 30th, 2009 at 10:25 pm

    Just about a week ago I got infected with the Antivirus Live/Antivirus system pro crap. thanks to my dad who’s a computer wizard, I was able to run my laptop in safe mode with command prompt and find then rename the .exe files, and that seemed to do the trick.
    until a few days ago, after I dowloaded Microsoft Secruity Essentials and Malwarebytes, ran the full scans, MSE found nothing but MB wouldn’t finish the scan. even after nine hours. it seemed like it was in a loop and kept searching the same folder over and over again. for nine hours. so I aborted the scan.

    so last thursday/friday, I got this pop-up saying something about Trojan/FakeAV is a security risk from symantec(norton, I assumed), then promped me to take actions, which I did, and MSE apparently found it but when I tried to delete it, it couldn’t be found.

    Now I have Spyware Doctor and it detected the actual ASP thing, so I went in to the H_KEY_USERS or whatever the pathway begins with, deleted everything it detected, but it still seems like ASP is trying to take control of my computer. Even in Spyware Doctor under global action list, ASP is there, but it’s being permanently blocked by SD I’ve been able to keep it from doing anything with my various programs, but i’d like to be rid of thisthing once and for all. Thanks to all who read down this far, any suggestions on what I should do?

    Reply

    Luciana Reply:
    December 30th, 2009 at 11:59 pm

    Antivirus Live blocks many legitimate security tools but you can delete it manually. Manual removal option is worth trying.

    Reply

  7. Pam Roffman
    December 31st, 2009 at 7:03 am

    Thanks so much for this. On our system, the process was called “kckusysguard.exe” instead of “sysguard.exe” Also, doing a registry search found an entry for kckusysguard.exe that I removed.

    Reply

  8. Evert Bonte
    January 2nd, 2010 at 4:00 pm

    I cant use the manual guide, because the program wont let me open anything.

    Is there another method

    greetz

    Reply

    Luciana Reply:
    January 4th, 2010 at 12:45 am

    Well, you can run anti-spyware or you can use the manual removal in safe mode.

    Reply

  9. marie
    January 3rd, 2010 at 4:56 am

    unable to remove the antivirus live using manual or the antivirus live removal tool. unable to use the run option to use the task manager and regedit. i think the antivirus live took over my desktop. what are my option now since i cant do anything .

    Reply

    Luciana Reply:
    January 4th, 2010 at 12:55 am

    Re-install the operating system.

    Reply

  10. Matt O
    January 5th, 2010 at 10:59 am

    It worked perfectly! thank you very much!

    Reply

  11. Eric
    January 5th, 2010 at 11:12 am

    You should be able to manually shut your computer off with the power button. After doing so, start the computer up in SAFE MODE WITH NETWORKING. You can then do manual removal.

    Reply

    marie Reply:
    January 6th, 2010 at 10:47 am

    Thank you very much. it worked perfectly.

    Reply

  12. chris
    January 7th, 2010 at 6:00 pm

    OK, i figured out what to do!
    I had a problem where it would not let me access the task manager, or any other applications…SO WHAT DO YOU DO>>>>??

    restart your computer, as soon as u are logged in press (alt, ctrl, delete)
    this brings up the task manager BEFORE antivirus live takes over your applications
    do it as soon as you are logged in don’t wait, or it might be to late before you can access anything! find the process (sysguard.exe ) and click on it, then press (end task).
    that should do it. Then you can access run =DD

    Reply

  13. Pat
    January 10th, 2010 at 5:32 am

    I went to an earlier restore point and that worked for me. Prior to that I was experiencing all of the problems listed above.

    Reply

  14. Jon
    January 10th, 2010 at 4:12 pm

    thank you so much. my computer locked me out and after i installed that program everything went away, you saved me from having to wipe my memory. thx again

    Reply

  15. Samantha
    January 14th, 2010 at 8:07 pm

    Okay I just got rid of that damn softbarrier virus(thnx to your instructions) a month ago and now this happens so I was wondering if I should try the manual removal or use the program you showed. Plz help the virus is interfering with my anti-virus software…

    Reply

  16. Bob Noble
    January 16th, 2010 at 11:47 am

    My daughter’s computer: I spend $50 bucks to have Norton Internet Security on it (includes NAV). It is fully paid for, and fully updated. Then it gets this virus while Norton is standing guard. Then I spend an hour with a total moron named “Namith” while he totally wastes my time in their chat “help”. He tries to sell me other services, and when I press the issue of how to remove the virus, he says it will cost $100 for that “service”. Well, I think I already got the “service” from Norton. Thank God I had made an image of the C: drive with Paragon Hard Drive Manager 2009 (not a waste of time), so I told Namith to go F__ himself while I restored the image.

    Summary: First Symantec charges you to “protect” your system, then you get a virus while Norton is standing guard, and finally they have the audacity to charge you for removing the virus. F___ing Thieves probably WROTE the virus!

    Reply

  17. Bill
    January 17th, 2010 at 3:58 pm

    Manual removal was the only option for me as the program blocked all spyware starting up.
    Starting up in SAFE MODE was also required (selecting f8 on bootup), otherwise Antivirus Live blocked all attempts to delete it .

    found and deleted “ebtesysguard.exe” (not named “sysguard” anymore”) and its parent directory.

    ran “regedit” to delete the registry information posted above on this site.

    blocked the associated sites in IE, listed above on this site.

    restarted in normal mode & it’s gone!

    Oh yeah, also removed the proxy settings in IE manually.

    Reply

  18. Patricia
    January 21st, 2010 at 4:57 am

    Had the same problem on my daughter’s PC. I followed PC tools instructions to get internet access (steps are below)

    As soon as I followed the instructions below- the pop-dialog boxes stopped and I had access to to the Internet. I could not find the “keys” or files mentioned on this site or the pctools and Vista would not let me change file names or delete the few files that I did find suspect.
    So, I bought pctools online, downloaded it and it worked great. (forget Norton – I tried that as I had just bought it for my computer and it found nothing.) I also went into explorer and blocked all the adware sites listed on this webpage just to make sure.
    ==========================================
    What to do if there is no internet connection?
    Launch Internet Explorer
    Go to Tools and then Internet Options
    Choose Connections tab
    Click on Lan settings
    Uncheck box next to Use a proxy server for your LAN
    Click OK to close current window
    Click OK to close Internet Options window
    Trojans will block any application from being run, stating that they are infected, in order to avoid anti-spyware tool installation, which might remove the virus. Before downloading Antivirus Live removal tool, certain changes must be made.

    Good Luck.
    Patricia

    Reply

  19. nick
    January 21st, 2010 at 9:26 am

    thank you, all i did was restart my computer and pressed Alt Ctrl Del at the same time, had trouble searching for the “sysguard” its named something different but it always have guard in it. clicked on it and press end now. and bam its gone :)

    Reply

  20. david
    January 22nd, 2010 at 9:35 am

    i have a huge problem here. i cant seem to get rid of any of this antivirus live stuff and its driving me insane. ive tried the manual way, to no avail. i have also attempted a norton 360 virus survey but it doesnt seem to have registered the fact that my laptop is infected. what else can i do? im only 14 and my dad is going to murder me when he finds out. my lack of knowledge in the computer department doesnt really help the situation either. help!

    Reply

    Patricia Reply:
    January 25th, 2010 at 4:45 am

    It happened to my 14 year old daughter too- the virus looks just like Windows Defender and is hard to distinguish. Just tell your Dad. I told my daughter that this happens to everyone if you don’t have a anti-virus program running. Worst case, pay $30 or less and get a anti-spyware program to get rid of it. That’s what we did … go look at pctools.com ..I know that one works- don’t waste your time with Norton- it doesn’t work. The good news is that it really has not corrupted or damaged anything even though the messages say it has.

    Reply

  21. JB
    January 22nd, 2010 at 6:48 pm

    My version of the virus prevents loading Windows in SAFE MODE, so despite attempting to delete in manually, it continues to reappear. Any suggestions?

    Reply

  22. Rita
    February 1st, 2010 at 9:22 am

    The manual fix worked! Thank you so much.

    Reply

  23. patti
    March 13th, 2010 at 6:22 pm

    HI I AM HAVING ALOT OF PROBLEMS WITH ANTIVIRUS LIVE BASIC AND I CAN’T DO NOTHING ON MY COMPUTER..HOW DO I GET RID OF IT???I RAN MY OTHER ANTIVIRUS AND MICROSOFT ESSENTIAL CAUGHT THE VIRUS..BUT NOW I CANT EVEN TAKE THIS DAMN PROGRAM OFF MY COMPUTER ANYONE OUT THERE THAT CAN HELP ME??

    Reply

  24. Jeanie Q
    December 12th, 2010 at 8:51 am

    This also happened to me. Mine was so bad that it froze my whole computer and I couldn’t get on line or open any program, photos or documents. However, other user accounts on my computer weren’t infected, so I set up a new user administrator account and deleted the infected user account and that seemed to do the trick. I lost some documents and photos, but I had a rescue disk with most of my info on it, so it wasn’t too bad. This just happened to my husbands computer today and when I told him to switch to a different User Account it also worked for him.
    So now, if I see any screen pop-ups, I just shut my computer down from the power button and re-boot.
    Is there some place we can file a complaint against these computer pirates?

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»