How to Remove Live PC Care | Live PC Care Removal Guide
Live PC Care is a rogue antivirus application that is advertised and promoted through misleading ads and aggressive tactics. In many cases the ad may be an animation of a scan of a computer that claims to find viruses and you must click a link to fix the problem. This downloads the software and then it continues to find problems and threats on your computer that it claims can only be fixed if you purchase the software. Read on for how to remove Live PC Care.
Once this rogue is installed on your computer it will create the following files:
%docs%\%user%\Recent\cb.drv
%docs%\%user%\Recent\CLSV.sys
%docs%\%user%\Recent\DBOLE.exe
%docs%\%user%\Recent\DBOLE.sys
%docs%\%user%\Recent\exec.dll
%docs%\%user%\Recent\fan.exe
%docs%\%user%\Recent\FW.dll
%docs%\%user%\Recent\hymt.drv
%docs%\%user%\Recent\kernel32.drv
%docs%\%user%\Recent\PE.tmp
%docs%\%user%\Recent\ppal.dll
%docs%\%user%\Recent\ppal.sys
%docs%\%user%\Recent\runddl.dll
%docs%\%user%\Recent\SM.dll
It then uses these files in its future scans to claim that they are virus infected files and should be cleaned up (again it cannot clean them up unless you purchase.)
You should first try to uninstall live PC care by going to the control panel and using the add/remove programs applet. If you are able to uninstall it there, so much the better! Even if it does uninstall here I would suggest a followup scan with superantispyware or malwarebytes antimalware and a follow up with a trustworthy antivirus such as avg/avira/ or housecall from trend micro.
You can find a download link for malwarebytes antimalware on my virus removal toolkit page. While you are there you may also wish to download process explorer as you may need to make use of it later in the live pc care removal.
If you are unable to launch malwarebytes antimalware installer you may try the following tricks. 1) rename the installer from mbam-setup.exe to something like iexplore.exe then retry the install, update and scan. 2) reboot into safe mode with networking and retry the install update and scan. 3) follow the next step which is killing off the running processes associated with live pc care and then retry the install, update and scan.
The following processes should be killed off to continue with the removal of live pc care. If you are unable to launch the task manager to terminate these, try the following: 1) copy and paste the taskmgr.exe program to the desktop and rename it to something else… firefox.exe 2) reboot into safe mode and see if the processes are running (many times they won’t load in safe mode.) 3) use process explorer instead to kill off the following processes:
LP339.exe
There may be a randomization component to the above filename. There also may be other running processes. Check the list of files below to be deleted for a manual removal of live pc care and compare them to what you see on your system to determine the correct processes to kill off.
The following files and folders should be deleted:
%docs%\All Users\Application Data\117fc
%docs%\All Users\Application Data\117fc\LP339.exe
%docs%\All Users\Application Data\117fc\LPCG.ico
%docs%\All Users\Application Data\117fc\8233.mof
%docs%\All Users\Application Data\117fc\mozcrt19.dll
%docs%\All Users\Application Data\117fc\sqlite3.dll
%docs%\All Users\Application Data\117fc\LPCGSys\vd952342.bd
%docs%\All Users\Application Data\LPCGSys
%docs%\All Users\Application Data\LPCGSys\lpcg.cfg
%docs%\%user%\Application Data\Live PC Care
%docs%\%user%\Application Data\Live PC Care\cookies.sqlite
%docs%\%user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live PC Care.lnk
%docs%\%user%\Desktop\Live PC Care.lnk
%docs%\%user%\Recent\cb.drv
%docs%\%user%\Recent\CLSV.sys
%docs%\%user%\Recent\DBOLE.exe
%docs%\%user%\Recent\DBOLE.sys
%docs%\%user%\Recent\exec.dll
%docs%\%user%\Recent\fan.exe
%docs%\%user%\Recent\FW.dll
%docs%\%user%\Recent\hymt.drv
%docs%\%user%\Recent\kernel32.drv
%docs%\%user%\Recent\PE.tmp
%docs%\%user%\Recent\ppal.dll
%docs%\%user%\Recent\ppal.sys
%docs%\%user%\Recent\runddl.dll
%docs%\%user%\Recent\SM.dll
%docs%\%user%\Start Menu\Live PC Care.lnk
%docs%\%user%\Start Menu\Programs\Live PC Care.lnk
%progfiles%\Mozilla Firefox\searchplugins\search.xml
After the above files have been deleted you have completed the majority of the removal of live pc care and should follow up with a scan of your system by either superantispyware, or malwarebytes antimalware and then a reputable antivirus (avg/trend micro house call/avira/etc.)