"PC Live Guard" - need removal help

[bluejeangirl76]

I think the title is self-explanatory, but here is the situation...

My boss's laptop has become riddled with this damn PC Live Guard thing.
Can't remove it through "Add/Remove Programs".

I saw several sites with downloadable removal tools, but I am not willing to blindly trust those sites, and I know some of y'all know way more about this than I do. I can do minor techie stuff, but this one is beyond me... I don't trust sites that want me to download stuff I'm not familiar with.

What do we do? Or do we just start crying and call Geek Squad?

[Ehwmatt]

Not to be obnoxious, but buy a Mac

Geek Squad is HORRENDOUS. Miserable pieces of shit. Go through a small-time computer help company instead. But where the hell is your IT department? You work in a small place?

[bluejeangirl76]

But where the hell is your IT department? You work in a small place?

IT department? LMAO!!

I *AM* the IT department which means YOU GUYS are my IT department.
(Where's Rip? HE is my IT guy!)
We have one guy that I'll go to if I can't remove it myself - he knows a bit more about stuff like this than I do.

If he can't fix it... then we'll have to take it in, I guess.

[Ehwmatt]

But where the hell is your IT department? You work in a small place?

IT department? LMAO!!

I *AM* the IT department which means YOU GUYS are my IT department.
(Where's Rip? HE is my IT guy!)
We have one guy that I'll go to if I can't remove it myself - he knows a bit more about stuff like this than I do.

If he can't fix it... then we'll have to take it in, I guess.

Ah. Can't help, sorry. I haven't used Winblows in years, but I don't miss these horrendous problems... I remember formatting my hard drive to get rid of some of the annoying shit like this.

[Rick]

I think the title is self-explanatory, but here is the situation...

My boss's laptop has become riddled with this damn PC Live Guard thing.
Can't remove it through "Add/Remove Programs".

I saw several sites with downloadable removal tools, but I am not willing to blindly trust those sites, and I know some of y'all know way more about this than I do. I can do minor techie stuff, but this one is beyond me... I don't trust sites that want me to download stuff I'm not familiar with.

What do we do? Or do we just start crying and call Geek Squad?

There are removal instructions here.

http://www.bleepingcomputer.com/virus-r ... live-guard

[Sarah]

Boot the computer into Safe Mode and run a full scan with Malwarebytes.

[Don]

Download the free version of this program.

MalwareBytes

http://www.malwarebytes.org/mbam.php

After install, click the update tab. After it has updated, run a full scan. You should get a box that says to see results of the scan. Click Okay. Now you should see everything that was found on your computer with a tick next to it. Click remove. When it's done you'll get a log file that you can review or just close it.

The pay version of MalwareBytes updates automatically but I just use the free version and manually update/scan once a week for anything that Avast missed, which rarely occurs.

[Don]

Are we redundant or what?

[Don]

Put this on there when you're done. I've been using it for years and it's really top notch as far as free software goes.

http://www.avast.com/eng/download-avast-home.html

A free firewall that I think is even better than ZoneAlarm.
You can deselect the virus protection that comes bundled with it during the install and just install the firewall.

http://personalfirewall.comodo.com/down ... ewall.html

[bluejeangirl76]

There are removal instructions here.

http://www.bleepingcomputer.com/virus-r ... live-guard

Download the free version of this program.

MalwareBytes

http://www.malwarebytes.org/mbam.php

Ok - one last question - I did see both of those ^ when I searched, and I hesitated with them because of not being familiar with those sites, so you guys are saying that it's ok to use sites like that, yes?

I SO appreciate the help, guys! Removing bullschutt (Hi C-Deb!) like this isn't usually something so major that I wanted to run to paying someone to do it, I just wanted to get advice on using those kind of sites with the removal tools before I go clicking on stuff and end up jacking it up worse.

[lights1961]

Boot the computer into Safe Mode and run a full scan with Malwarebytes.

good way to go...

also in safe mode this scan also works...

http://onecare.live.com/

[Abitaman]

You have windows defender, you can go in and remove the program also.

[brywool]

DON'T USE GEEK SQUAD- WAY overpriced.

[bluejeangirl76]

DON'T USE GEEK SQUAD- WAY overpriced.

I wouldn't. Was just my general term for "do we actually need to PAY to fix this"

I'm the one they come to with their "MY COMPUTER IS DOING WEIRD THINGS!" problems, and 19 times of 20, I can handle their issue, because their issue is usually solvable by saying "You're running an earlier version of office... have them re-save the file and send it to you in the earlier format" or "um... you have to click "Merge" to get the fields to populate, you can't just stare at the template". (that happened last week... they called me to "fix what's wrong" and I was like... "Nothing's wrong except user error"). Don't even get me started on what happens when the printer "doesn't work".

But there's that one time where I have to go... "dude I have no idea why it's doing that. have you hit it yet?... and that didn't work?... ok, well... hit it again...? "

[Don]

Another alternative, if you have a really screwed up drive, short of formatting it is to make yourself a live linux CD (Ubuntu, freespire, knoppix, etc.). If worse comes to worse you can use those to boot up and run a virus program through them.

Better yet try this one.

http://trinityhome.org/Home/index.php?w ... ront_id=12

Just burn an ISO or keep it on a USB drive for emergencies.

All free, by the way.

[T-Bone]

Have fun getting to any of those links with that virus running... YThat same virus will also disable you from going to Microsoft.com, McAffee.com, Symantec.com, etc... Any site where there's a program that'll aid you in getting rid of it. It'll just say that the site is harmful to your PC and it's protecting you. Many of those types of viruses will automatically disable your PC restore points as well as not allow you to install a program that'll help you get rid of it. The Malwarebytes will certainly scan for a problem, but for it to do anything, you may have to buy it.

The last 3-4 computers I worked on here had a variation of that same virus. After spending 6-7 hours on the first computer and failing at everything I tried, I eventually just took out the hard drive and put it in an external enclosure, Upped my AV on MY computer and transferred all the personal files, documents, pics and music onto another external. I put their hard drive back in the PC and completely redid the operating system to new and then put back their files from the external. That in itself can be time consuming, so if you're not up for it, you may have no other choice but to find a computer technician. If not Geek Squad, then somewhere else.

[bluejeangirl76]

Have fun getting to any of those links with that virus running... That same virus will also disable you from going to Microsoft.com, McAffee.com, Symantec.com, etc... Any site where there's a program that'll aid you in getting rid of it.

I knew it! That's what I was afraid of! She did try to install McAfee and it only installed the anti-theft one, NOT the anti-virus one.

Frig!

[Behshad]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

[bluejeangirl76]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

I considered that, BUT... I'm gonna turn it over to our unofficial in-house tech-guy and see if he agrees with me - that the company should just get her a new laptop (she inherited it from the previous person who did her job) because she's had other problems with it anyway.

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

[Jana]

DON'T USE GEEK SQUAD- WAY overpriced.

I wouldn't. Was just my general term for "do we actually need to PAY to fix this"

I'm the one they come to with their "MY COMPUTER IS DOING WEIRD THINGS!" problems, and 19 times of 20, I can handle their issue, because their issue is usually solvable by saying "You're running an earlier version of office... have them re-save the file and send it to you in the earlier format" or "um... you have to click "Merge" to get the fields to populate, you can't just stare at the template". (that happened last week... they called me to "fix what's wrong" and I was like... "Nothing's wrong except user error"). Don't even get me started on what happens when the printer "doesn't work".

But there's that one time where I have to go... "dude I have no idea why it's doing that. have you hit it yet?... and that didn't work?... ok, well... hit it again...? "

If this is for your job, I would have an IT do it rather than spend all this time. I kept messing with mine and made it worse and ultimately my computer shut down. It took the guys hours to get it up and all the spyware stuff off.

This last time the worm or virus or whatever invaded my system guy was going to charge me a lot again. I talked to our IT guy the office uses, and he came online virtual into my computer and reinstalled the free maleoware, that this virus or whatever had deleted, and spent about 40 to 45 minutes and cleaned it right off. I watched all the stuff he was doing that whole time. I in no way couldn't have done all he did He says he does a lot of it virtual now, where he doesn't have to come onsite.

[Behshad]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

I considered that, BUT... I'm gonna turn it over to our unofficial in-house tech-guy and see if he agrees with me - that the company should just get her a new laptop (she inherited it from the previous person who did her job) because she's had other problems with it anyway.

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

[Don]

Have fun getting to any of those links with that virus running... YThat same virus will also disable you from going to Microsoft.com, McAffee.com, Symantec.com, etc... Any site where there's a program that'll aid you in getting rid of it. It'll just say that the site is harmful to your PC and it's protecting you. Many of those types of viruses will automatically disable your PC restore points as well as not allow you to install a program that'll help you get rid of it. The Malwarebytes will certainly scan for a problem, but for it to do anything, you may have to buy it.

The last 3-4 computers I worked on here had a variation of that same virus. After spending 6-7 hours on the first computer and failing at everything I tried, I eventually just took out the hard drive and put it in an external enclosure, Upped my AV on MY computer and transferred all the personal files, documents, pics and music onto another external. I put their hard drive back in the PC and completely redid the operating system to new and then put back their files from the external. That in itself can be time consuming, so if you're not up for it, you may have no other choice but to find a computer technician. If not Geek Squad, then somewhere else.

I had a problem where I couldn't connect to any site at all. I had to download MalwareBytes from another computer, update it there and bring over it and the dat file on a usb drive and install it manually, but of course not all cases or that extreme.

[bluejeangirl76]

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

Excuse me, I cause relatively FEW problems.

I do admit to once in awhile adding to a problem or two. But I try not to get the ball rolling.

Tech guy is not examining the problem, and he just said to me... "I blame you... you happen to be the closest person and someone needs to get blamed."

Such is my life.

[Behshad]

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

Excuse me, I cause relatively FEW problems.

I do admit to once in awhile adding to a problem or two. But I try not to get the ball rolling.

Tech guy is not examining the problem, and he just said to me... "I blame you... you happen to be the closest person and someone needs to get blamed."

Such is my life.

Unclench, Trouble !

[bluejeangirl76]

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

Excuse me, I cause relatively FEW problems.

I do admit to once in awhile adding to a problem or two. But I try not to get the ball rolling.

Tech guy is not examining the problem, and he just said to me... "I blame you... you happen to be the closest person and someone needs to get blamed."

Such is my life.

Unclench, Trouble !

I hear that a lot.

[Behshad]

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

Excuse me, I cause relatively FEW problems.

I do admit to once in awhile adding to a problem or two. But I try not to get the ball rolling.

Tech guy is not examining the problem, and he just said to me... "I blame you... you happen to be the closest person and someone needs to get blamed."

Such is my life.

Unclench, Trouble !

I hear that a lot.

Now now,, cheer up youre not trouble,, you never ever cause any trouble

[bluejeangirl76]

I can't do a restore because of the specific sales programming we use... at this point it's a problem that's outside of my ability to fix (correctly) without causing other problems.

So is the the NEW 2010 BJG, who actually cares enough not to cause others problems ??

Excuse me, I cause relatively FEW problems.

I do admit to once in awhile adding to a problem or two. But I try not to get the ball rolling.

Tech guy is not examining the problem, and he just said to me... "I blame you... you happen to be the closest person and someone needs to get blamed."

Such is my life.

Unclench, Trouble !

I hear that a lot.

Now now,, cheer up youre not trouble,, you never ever cause any trouble

I meant the "unclench" part.

[Rip Rokken]

These infections are rampant these days, and almost all viruses I've seen for the past year masquerade as antivirus apps. There has been a new rash just this past week. Best I can tell most are coming from e-mail and infected websites.

This latest round has been much easier to kill that some -- lots of bark but little bite. Often just a single file which may block off many avenues of removal such as Task Manager, Regedit, etc. Some prevent a PC from starting in Safe Mode, and I'll either use a boot disk or in worst cases remove the hard drive and connect it via a USB rig to another PC so I can view the files outside of Windows.

You may get lucky -- if this is a single-file infection like the others I've seen this week, look inside "C:\Documents and Settings" (Windows XP) and you'll probably find it hanging out in a random-named folder under the "Application Data" folder in one of the profiles -- try either his profile or the All Users profile. Also under his profile, check the "Local Settings\Application Data" folder. The infected folder could be named with 8 random characters.

Now here is the patented Rip Rokken Leg Sweep for viruses like that and it works quite often. If you can't delete the file because it's in use, try moving it to the root directory, then reboot. It won't be able to start back up and you can delete it then. The ones I've seen in the last week were not very defensive and didn't attempt to repair themselves, but a batch I ran across a month ago were much more complex.

Good luck!

[Behshad]

RipRokken ,
you wasted money on gettin that Leg Sweep patented.
If a file is infected and in use and you can't delete it , it also means that you can not move it to the root directory. :p

[Jana]

These infections are rampant these days, and almost all viruses I've seen for the past year masquerade as antivirus apps. There has been a new rash just this past week. Best I can tell most are coming from e-mail and infected websites.

This latest round has been much easier to kill that some -- lots of bark but little bite. Often just a single file which may block off many avenues of removal such as Task Manager, Regedit, etc. Some prevent a PC from starting in Safe Mode, and I'll either use a boot disk or in worst cases remove the hard drive and connect it via a USB rig to another PC so I can view the files outside of Windows.

You may get lucky -- if this is a single-file infection like the others I've seen this week, look inside "C:\Documents and Settings" (Windows XP) and you'll probably find it hanging out in a random-named folder under the "Application Data" folder in one of the profiles -- try either his profile or the All Users profile. Also under his profile, check the "Local Settings\Application Data" folder. The infected folder could be named with 8 random characters.

Now here is the patented Rip Rokken Leg Sweep for viruses like that and it works quite often. If you can't delete the file because it's in use, try moving it to the root directory, then reboot. It won't be able to start back up and you can delete it then. The ones I've seen in the last week were not very defensive and didn't attempt to repair themselves, but a batch I ran across a month ago were much more complex.

Good luck!

The ones I had I ended up having like 75 viruses by the time it was all said and done b/c it tricked me to clicking on something, thinking I clicking off one of those pop-ups, and they are coming from infected websites is what they told me. My IT guy told me it's been getting worse and many people are using two separate computers, one work and one internet surfing, so their work one doesn't get hit so much by these. This last one actually came on and deleted my Maleaware icon.