By Jim
Updated on Wednesday, December 16th, 2009
Thought PC Live Guard is a legit antivirus? Think again. It’s just another deceitful program that’s actually meant to fool you into buying something that doesn’t do anything useful. It enters your system by way of a trojan, so if you’re fond of downloading free mp3′s, video codecs, system tools, antivirus tools, and drivers, chances are, you already have it in your computer.
Once inside, you may expect your system to slow down into a snail-paced speed. Furthermore, it’s going to create files in system folders that doesn’t actually do anything except mislead you into thinking they’re virus files. There’s a virus in your system alright, and it’s called PC Live Guard.
In case you won’t pay attention to the reduced performance of your computer, this malware will launch popups displaying false alerts. The alerts typically warn you of the presence of certain viruses, showing their names in the popups. That way, when you conduct a search of those names, you’ll be able to find them in the system folders, where the fictitious files were created.
The moment it catches your attention, it can then deliver its coup de grace – a message advising you to purchase a “full version” of PC Live Guard. Just like all fake antivirus programs, this one won’t do anything at all. Ah, it does something alright: force you to spend your hard-earned money.
Symptoms Of Infection
- Your computer is acting slow. PC Live Guard slow down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. PC Live Guard infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious PC Live Guard infection.
Dangers Of Infection
Viruses like PC Live Guard will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some PC Live Guard infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall PC Live Guard Processes
Delete PC Live Guard Files
%UserProfile%\Application Data\PC Live Guard\cookies.sqlite
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Live Guard.lnk
%UserProfile%\Desktop\PC Live Guard.lnk
%UserProfile%\Start Menu\PC Live Guard.lnk
%UserProfile%\Start Menu\Programs\PC Live Guard.lnk
%Program Files%\Mozilla Firefox\searchplugins\search.xml
c:\Documents and Settings\All Users\Application Data\117fc\
c:\Documents and Settings\All Users\Application Data\117fc\PC339.exe
c:\Documents and Settings\All Users\Application Data\117fc\PCLG.ico
c:\Documents and Settings\All Users\Application Data\117fc\573.mof
c:\Documents and Settings\All Users\Application Data\117fc\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\117fc\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\117fc\PCLGSys
c:\Documents and Settings\All Users\Application Data\117fc\PCLGSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\117fc\BackUp\
c:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items\
c:\Documents and Settings\All Users\Application Data\PCYZDUHBELG
c:\Documents and Settings\All Users\Application Data\PCYZDUHBELG\PCAWWLG.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Live Guard.lnk
%UserProfile%\Application Data\PC Live Guard
%UserProfile%\Application Data\PC Live Guard\cookies.sqlite
%UserProfile%\Recent\gid.tmp %UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
Remove PC Live Guard Registry Files
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_edb11.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “IIL”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “[xSP_2:117fc3395e69e29f71abba93a68c4181_7]”
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=7&q={searchTerms}”
Popular Search Terms
Remove PC Live Guard
Delete PC Live Guard
Uninstall PC Live Guard
How to get rid of PC Live Guard
How to remove PC Live Guard
PC Live Guard removal
Remove PCLiveGuard
PCLiveGuard removal
PC-Live-Guard
Posted under Fake Antispyware | No Comments
