Help - just got infected by Anti-Virus Live!

[bryanlyng]

Just got infected - but my Firefox is still working.  I've downloaded some seemingly good programs - but they won't run!!

Any ideas - help!

[rodi]

Hello,

You have to end Antivirus Live processes first. They block anti-virus software.

1. Download HijackThis from http://go.trendmicro.com/free-tools/hijackthis/HijackThis.exe
NOTE: before saving HijackThis.exe rename it to explorer.exe

2. Doubleclick on the explorer.exe to run it. Click "Do a system scan only" button. Look for such lines in scan results:

R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O4 – HKCU\..\Run: [rospmsdq] C:\Documents and Settings\user\Local Settings\Application Data\ovugbs\xafrsysguard.exe

Basically look for entries with [random]sysguard.exe. In your case those entries will be different, not the same as shown above.

3. Select those entries, close all running programs then click once on the “fix checked” button. Exit HijackThis.

4. Download Spyware Doctor and scan your PC.
http://www.2-spyware.com/review-spyware-doctor.html

Good luck!

[kristain]

Antivirus Live, also known as Antivirus Live, is believed to be a replica of the rogue program: Antivirus System Pro.

Manual removal is probably your best bet at maintaining the integrity of your computer, but manual removal should only be tried by those individuals that know a bit about registry files, and should be left to the individual who knows how to navigate their way around system files.

All in all though, I would recommend, especially if you are not completely tech savvy, to make use of a reliable and legitimate, fully functional, up-to-date anti-spyware application, to remove Antivirus Live and all its components from the infected computer system.