"PC Live Guard" - need removal help

[Abitaman]

That is why I like AVG, used the free for years, but last bought the regualr one. When you search shows trusted sites and bad sites, has a lot of other features the free doesn't have. That and wondows defender, and I feel pretty safe about my computer. Plus no large out of pocket money for all these other programs (Norton, Mcafee, etc..)

[Sarah]

My vote is for Avast, I've heard AVG is the low tier of the 3 main free AV's (Avast, Avira, AVG)

[Tomulator]

Not to be obnoxious, but buy a Mac :lol:

Geek Squad is HORRENDOUS. Miserable pieces of shit. Go through a small-time computer help company instead. But where the hell is your IT department? You work in a small place?

Why buy a Mac when they can get hacked/infected just like a PC can?

[Sarah]

And why buy a Mac when you can avoid getting an infected PC by using common sense? I don't want to jinx myself, but I've never had a virus or malware that fucked up my system, or gave me extra popups, or blocked my Internet access, even when I was primarily using Internet Explorer. And I'm on the computer ALL the time. It's not Macs people need, it's the common sense not to open suspicious attachments, click "yes" to everything, or browse Russian porn sites.

[Don]

And why buy a Mac when you can avoid getting an infected PC by using common sense? I don't want to jinx myself, but I've never had a virus or malware that fucked up my system, or gave me extra popups, or blocked my Internet access, even when I was primarily using Internet Explorer. And I'm on the computer ALL the time. It's not Macs people need, it's the common sense not to open suspicious attachments, click "yes" to everything, or browse Russian porn sites.

My home computer runs along fine with Avast and Comodo, it's my work computer, which uses Panda that has the issues. Since Panda is considered a Scientologist company, I have to live with it. I do have admin privileges though so I can use MalwareBytes and other software when things totally tank, I'm just not allowed to remove Panda.

[Behshad]

And why buy a Mac when you can avoid getting an infected PC by using common sense? I don't want to jinx myself, but I've never had a virus or malware that fucked up my system, or gave me extra popups, or blocked my Internet access, even when I was primarily using Internet Explorer. And I'm on the computer ALL the time. It's not Macs people need, it's the common sense not to open suspicious attachments, click "yes" to everything, or browse Russian porn sites.

Sarah , whats your email address ,dear?

[T-Bone]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

You must have missed the part where I said that these viruses disable the restore points...

[T-Bone]

For Antiviruses, I surf review sites for top 10 lists and it looks like Bitdefender and Kaspersky come in at 1 and 2 almost every time

http://anti-virus-software-review.toptenreviews.com/


BUT,,,


No AV will protect you from your own stupidity... If you're going to sites and clicking on things without actually checking to see what they are or not even reading the User Agreements on programs before clicking the OK button, you deserve what you get

[Behshad]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

You must have missed the part where I said that these viruses disable the restore points...

you mustve missed the part where I said it's worked the best for me SO FAR.

[T-Bone]

Then you didn't have the same type of virus.

[Sarah]

And why buy a Mac when you can avoid getting an infected PC by using common sense? I don't want to jinx myself, but I've never had a virus or malware that fucked up my system, or gave me extra popups, or blocked my Internet access, even when I was primarily using Internet Explorer. And I'm on the computer ALL the time. It's not Macs people need, it's the common sense not to open suspicious attachments, click "yes" to everything, or browse Russian porn sites.

Sarah , whats your email address ,dear?

So you can send me suspicious attachments which I already said I wouldn't normally open?

[Behshad]

And why buy a Mac when you can avoid getting an infected PC by using common sense? I don't want to jinx myself, but I've never had a virus or malware that fucked up my system, or gave me extra popups, or blocked my Internet access, even when I was primarily using Internet Explorer. And I'm on the computer ALL the time. It's not Macs people need, it's the common sense not to open suspicious attachments, click "yes" to everything, or browse Russian porn sites.

Sarah , whats your email address ,dear?

So you can send me suspicious attachments which I already said I wouldn't normally open?

[Rip Rokken]

best thing that has helped me in the past with crap like this is just to restore to a previous restore point from a week ago.

You must have missed the part where I said that these viruses disable the restore points...

And some disable booting in Safe Mode. They do keep getting trickier and trickier. I found one the other day that had modified the WININET.DLL file, and the size and all attributes were still the same -- the recent modification date was the only clue.

BTW, if you are ever in doubt as to whether a file is malicious or not, upload it to virustotal.com -- scans the file with just about every conceivable av engine out there and lets you know how they detect it. One of my favorite sites.

[Rip Rokken]

RipRokken ,
you wasted money on gettin that Leg Sweep patented.
If a file is infected and in use and you can't delete it , it also means that you can not move it to the root directory. :p

Ahh... not so, Daniel-San. I do it all the time (generally to a temp folder on the Desktop), mainly with DLLs and EXE files. Logic would dictate that files in memory that can't be deleted can neither be moved, but a surprising number of them can be moved whilst in use. A little trick I stumbled upon myself, hence the "patented" part.

[bluejeangirl76]

You may get lucky -- if this is a single-file infection like the others I've seen this week, look inside "C:\Documents and Settings" (Windows XP) and you'll probably find it hanging out in a random-named folder under the "Application Data" folder in one of the profiles -- try either his profile or the All Users profile. Also under his profile, check the "Local Settings\Application Data" folder. The infected folder could be named with 8 random characters.

Now here is the patented Rip Rokken Leg Sweep for viruses like that and it works quite often. If you can't delete the file because it's in use, try moving it to the root directory, then reboot. It won't be able to start back up and you can delete it then. The ones I've seen in the last week were not very defensive and didn't attempt to repair themselves, but a batch I ran across a month ago were much more complex.

You just said a whole big bunch of crap I did not understand. Move the virus into the director's office and then color my roots? How is that gonna help anything?

Anyway... we referred the problem to our resident "I know everything (but really I don't know as much as I'd have you think I know)" guy and he seems to have fixed it. He used that "malwarebytes" thing that Gunbot posted, I believe, and she hasn't had a problem since. I'm paranoid of opening emails from her now though. (can I get out of doing stuff with this? "Sorry, boss... I got your email but I won't be able to help you because I refuse to open anything that comes from your filthy computer... ask one of the others to do it..." )

[Rip Rokken]

You just said a whole big bunch of crap I did not understand.

That's a talent that has taken years to perfect, and elevated me to the top of my field.

He used that "malwarebytes" thing that Gunbot posted, I believe, and she hasn't had a problem since.

It's a popular malware scanner, and a lot of people use it. Me, I do things almost completely backwards. On infected systems I temporarily disable all AV protection (whatever the virus hasn't already damaged) and start with manual detection and removal using a boot disk at most, then follow up with a handful of tools. In the worst cases I'll finish with a full AV scan to remove any remaining orphaned files.