Remove PC Live Guard

December 8th, 2009 | by Alex |

PC Live Guard Descriptions:

PC Live Guard is the latest creation of the VirusDoctor family. It is the malicious rogueware, installed after you visit unreliable sites. You don’t even have to agree with the installation. PC Live Guard installs itself without your knowledge.

As soon as the suspicious application is on your PC, it starts its fake activities. Every time you boot up your PC, PC Live Guard scans your computer and, of course, detects a number of infections on it. However, these files are created in advance by Trojans. In addition to fake scan results, you keep getting warnings that your system is in danger. All of the tactics lead to the purchase of the fake application.

Do NOT ever trust PC Live Guard. You will get nothing if you purchase the software. In case, you are already infected, below is the full instructions on how to get rid of the rogueware.

Manual PC Live Guard Removal Instructions:

Stop These PC Live Guard Processes:
(Learn how to do this)
PC339.exe

Find and Delete These PC Live Guard Files:
(Learn how to do this)
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Live Guard.lnk
%UserProfile%\Application Data\PC Live Guard
%UserProfile%\Application Data\PC Live Guard\cookies.sqlite
%UserProfile%\Desktop\PC Live Guard.lnk
%UserProfile%\Recent\gid.tmp
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
%UserProfile%\Start Menu\PC Live Guard.lnk
%UserProfile%\Start Menu\Programs\PC Live Guard.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
c:\Documents and Settings\All Users\Application Data\117fc\
c:\Documents and Settings\All Users\Application Data\117fc\PC339.exe
c:\Documents and Settings\All Users\Application Data\117fc\PCLG.ico
c:\Documents and Settings\All Users\Application Data\117fc\573.mof
c:\Documents and Settings\All Users\Application Data\117fc\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\117fc\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\117fc\PCLGSys
c:\Documents and Settings\All Users\Application Data\117fc\PCLGSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\117fc\BackUp\
c:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items\
c:\Documents and Settings\All Users\Application Data\PCYZDUHBELG
c:\Documents and Settings\All Users\Application Data\PCYZDUHBELG\PCAWWLG.cfg
Remove These PC Live Guard Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PC Live Guard”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_edb11.DocHostUIHandler
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\3
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “IIL”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “[xSP_2:117fc3395e69e29f71abba93a68c4181_7]“