Need help removing anti-virus live

[yllek2003]

hi, i started following the steps to remove antivirus live off my sister's computer, but im stuck after disabling proxy server for LAN on internet explorer. I went through the steps and the next thing to do is download renamed process explorer--but i cant even connect to the internet. I currently have my laptop set up next to hers and writing this so i know theres not a prob with our internet. can someone help me?

[rodi]

Hello,

Reboot the infected computer in Safe Mode with Networking. As the computer is booting tap the "F8 Key" constantly which should bring up the "Windows Advanced Options Menu".  Use your arrow keys to move to "Safe Mode with Networking" and press your Enter key. More detailed guide: http://www.computerhope.com/issues/chsafe.htm

Then download Spyware Doctor from: http://www.pctools.com/downloads/afl_2-spyware/sdsetup.exe

Install it, update and run  a full system scan.

[shammett1970]

I am trying to get rid of this antivirus live but I keep getting a blue screen w/an error when I try to boot in safe mode with networking and it won't let me start up the computer that way - it takes me back to the same screen I get when I push F8. Is there anything else I can do?

[rodi]

1. Reboot your PC is normal mode
2. Download HijackThis from http://go.trendmicro.com/free-tools/hijackthis/HijackThis.exe
(before saving HijackThis.exe, rename it to iexplore.exe and save it to desktop)
3. Launch iexplore.exe and click “Do a system scan only” button. Look for lines that have [random]sysguard.exe, for example:

O4 – HKCU\..\Run: [wpolkxos] C:\Documents and Settings\user\Local Settings\Application Data\ovugbs\rwjrsysguard.exe
R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555

4. Select all entries, close all running programs then click "Fix checked" button. Exit HijackThis.
5. Download Spyware Doctor and run a full system scan:
http://www.pctools.com/downloads/afl_2-spyware/sdsetup.exe

Good luck!