How to Remove Antivirus Live [Removal Guide]

First topic message reminder :


This guide will give you easy instructions on how to remove Antivirus Live for free.


What is Antivirus Live? (Information)

Antivirus Live is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.

Antivirus Live is a new malicious specimen from the same group of fake antivirus software as Antivirus System Pro.


Antivirus Live Screenshot




HijackThis Lines Present:

O4 - HKLM\..\Run: [[random file name]] C:\Documents and Settings\GeekPolice VM\Local Settings\Application Data\[random file name]\[random file name]sysguard.exe


Antivirus Live items:

C:\Documents and Settings\GeekPolice VM\Local Settings\Application Data\[random file name]\[random file name]sysguard.exe
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random file name]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random file name]"

---

Follow these instructions to continue:

You have to start computer in Safe Mode by doing the following:

• Restart your computer
  
• After hearing your computer beep once during startup, but before the Windows icon appears, keep tapping F8.
  
• Instead of Windows loading as normal, a menu should appear
  
• Select the first option, to run Windows in Safe Mode with Networking.

Please start Internet Explorer, and when the program is open, click on the Tools menu and then select Internet Options.

• Now click on the Connections tab and then the Lan Settings button
  
• Under the Proxy Server section, please uncheck the checkbox labeled Use a proxy server for your LAN.
  
• Click the OK button to close this screen. Then press the Apply button and then the OK button to close the Internet Options screen. Now that you have disabled the proxy server you will be able to browse the web again with Internet Explorer.

---

1. Please download this removal tool: Malwarebytes' Anti-Malware.

If you are having problems downloading from the link above, click here:


Spoiler:

Download from here only if you have problems downloading from the link above.

2. Extract the file and install Malwarebytes' Anti-Malware by double clicking on winlogon.exe

3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.

4. Malwarebytes' Anti-Malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database

Spoiler:

• Malwarebytes' Anti-Malwares' latest database
  

Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that Malwarebytes' Anti-Malware is closed before installing the update.

5. Close ALL open Windows, Programs, File or Folders.

6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown above.

7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.



8. When the scan is finished a message box will appear, click Ok to continue.

9. Click Show Results.


10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.

11. Click on Remove selected


12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it dȋsplay a message stating that it needs to restart, please allow it to do so.

13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned.

To protect your computer from future threats like this, you may want to consider purchasing the Pro version of Malwarebytes' Anti-Malware with real-time protection from this link.

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this software, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you are privileged to other virus removal resources in future.

mine keeps saying the run times out

I have downloaded the anti-malware on one laptop and transferred it via a USB stick to my infected laptop and successfully removed the Antivirus live, but now when I open my browser I receive "Internet Explorer cannot display the webpage".
I sorted out the problem of being unable to open task manager by clicking "End Task" before Antivirus could pop up and close it, and I had the same problem whenever I tried to open IE then as well.

Kalakashi wrote:I have downloaded the anti-malware on one laptop and transferred it via a USB stick to my infected laptop and successfully removed the Antivirus live, but now when I open my browser I receive "Internet Explorer cannot display the webpage".
I sorted out the problem of being unable to open task manager by clicking "End Task" before Antivirus could pop up and close it, and I had the same problem whenever I tried to open IE then as well.

Hello,

To fix the Internet connection problem, try this:


Hello,

• Now click on the Connections tab and then the Lan Settings button
  
• Under the Proxy Server section, please uncheck the checkbox labeled Use a proxy server for your LAN.
  
• Click the OK button to close this screen. Then press the Apply button and then the OK button to close the Internet Options screen. Now that you have disabled the proxy server you will be able to browse the web again with Internet Explorer.

Open CMD, Reset WINSOCK entries to installation defaults by typing: netsh winsock reset catalog

Reset TCP/IP stack to installation defaults by typing: netsh int ip reset reset.log

Restart your PC.

If it doesn't work, download Winsock XP Fix from here, save it to your Desktop.
http://www.snapfiles.com/get/winsockxpfix.html

Double click on the exe on your Desktop.
Press the "Fix" button, then restart again.

See if you can connect now.

This, unfortunately does NOT work for me. I went into Safe Mode with Networking, ran Rkill (I dont know if advertising is allowed) and than I ran Malwarebytes Anti-Malware (I already had it installed). Did a FULL scan and I removed 12 infected processes that were picked up. I restarted and booted up the desktop normally. Next thing you know, Antivirus Live is still there, warning me and terminating processes. Any help here? Got around 3-4 hours until my dad comes home and finds out I screwed the computer up like, the 5th time. Any help is greatly appreciated. (I just recently registered for this forum and I dont know if I have to make a seperate thread for this?)

Hello,

Open a new topic here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

We will help you from there.

When i go to restart in safemode it won't let me chose anything. It's like the keyboard is disabled and no of the keys work. What should I do now.

In my haste. I downloaded a similar version which was a rouge version looking for money and infecting the computer as well. There is a difference "Malwarebytes Anti Software" is the free one "Malwarebytes Pro" is bad news. The flag went up for me when it found 1500 errors!!!!
In fact M.A.S cleaned up the Pro version as a bonus after getting rid of Antivirus live. Saved me $39 as well.
I have AVG, PC tools registry Cleaner and Spybot Search and Destroy who are all powerless in stopping Antivirus Live. 3rd infection in two weeks. Hope this one works!!! I'll pay if it does.

I followed your instructions for removing this insidious malware an they worked perfectly. Thank-you so much.

I have the Anti Virus LIVE in my XP
Every time I tried to reboot in safe mode my keyboard doesn't work.
What should I do?

Doctor Inferno wrote:

ChicagoTed wrote:am i really supposed to pay for the Anti-Malware? i have no way of paying for this

Hello,

Malwarebytes Anti-Malware is free. Simply download and run it.

Another computer cleaned and infection free thankyou so much just saved me hours of heartache trying to get rid of this infection cleaned and back to normal in 10mins. Thanks again

I'm following your directions to get rid of Antivirus live, however, when I try to restart in safe mode by tapping F8 I just get a blank screen. Is there a work around for this or am I out of luck???

Well, I got the safe mode to work and downloaded your fix and..........IT WORKED!!!!!! WOO HOO!!!! No more %^$#(*& Antivirus live popups! Thank you so much! God Bless you and MERRY CHRISTMAS!

IT WORKED I can't thank you enough and i'm sorry to the ones that couldn't get their computers fixed yet but hang in there...i promise you that it really worked otherwise i wouldn't be writing this...the only thing that i was confused on was if you needed to download malwarebytes' anti-malware before or after you began the process but go by the order the directions are in and it is fine...it didn't take no longer than 10mins. to get it completely done...i mean restart/safe mode/download (wait a few seconds before you can download, it is free)/clean up (i had 178 viruses completely removed)/back to normal mode/BROWSE!!!YAY!!

ANY news how to make my SAFE MODE work???

flairlive wrote:I have the Anti Virus LIVE in my XP
Every time I tried to reboot in safe mode my keyboard doesn't work.
What should I do?

Doctor Inferno wrote:

ChicagoTed wrote:am i really supposed to pay for the Anti-Malware? i have no way of paying for this

Hello,

Malwarebytes Anti-Malware is free. Simply download and run it.

Flairlive, Is your keyboard faulty? Please try to using another keyboard.