How to Remove PC Live Guard | PC Live Guard Removal Guide
PC Live Guard is a Rogue antivirus application that typically installs on a system through aggressive advertising and fake scan sites. You will see things that pop up appearing to be a scan of your computer, but it’s really just an ad pushing this product. Once the software is on your system it will create many files that it then holds up as proof of your system being infected by viruses. It also pops up many warnings about your system security and claims that it cannot fix any of the problems until you purchase the software. Read of for how to remove PC Live Guard.
Among the files that PC Live Guard creates are the following:
%docs%\%user%\Recent\cb.drv
%docs%\%user%\Recent\CLSV.sys
%docs%\%user%\Recent\DBOLE.exe
%docs%\%user%\Recent\FW.dll
%docs%\%user%\Recent\kernel32.drv
%docs%\%user%\Recent\PE.tmp
%docs%\%user%\Recent\ppal.dll
%docs%\%user%\Recent\SM.dll
%docs%\%user%\Recent\SICKBOY.tmp
%docs%\%user%\Recent\sld.drv
All of these are created by PC Live guard and should give you one more reason not to trust it. (As if it’s advertising tactics aren’t enough.)
The first thing you may wish to do to remove PC Live Guard is to go to the control panel and visit the add/remove programs area. Here you may try to uninstall pc live guard the traditional way. It probably won’t work, but if it does count yourself fortunate and then follow up with a scan of your pc with either superantispyware or malwarebytes antimalware and a virus scan from a reputable source (AVG/avira/trendmicros housecall/etc.)
You can find a link to download malwarebytes antimalware on my virus removal toolkit page. While you are there you may also wish to download process explorer as you may need to make use of it further in the removal process.
If you are unable to install malwarebytes antimalware you may try the following things. 1) rename the installer from mbam-setup.exe to something like iexplore.exe and retry the install, update and run a scan. 2) reboot into safe mode with networking and retry the install, update and scan. 3) Follow the next step which will be killing off the running processes associated with PC Live Guard and then retry the install/update and scan.
The following website should be blocked if you have a way of blocking domains for your network…
pcliveguard.com
The following programs should be killed off using the task manager to continue with your removal of pc live guard. If you are unable to launch the task manager you may try the following tricks: 1) copy and paste taskmgr.exe to the desktop and then rename it to something else (firefox.exe) and retry running it. 2) reboot into safe mode and see if the processes are running (they may not load in safe mode.) 3) use process explorer instead of task manager to kill off the following programs:
PC339.exe
There may be a randomization component to the above file name, use the pattern above and the file locations listed below to determine the correct programs to terminate on your system.
The following files and folders should be deleted for a manual removal of pc live guard:
%docs%\All Users\Application Data\117fc\
%docs%\All Users\Application Data\117fc\PC339.exe
%docs%\All Users\Application Data\117fc\PCLG.ico
%docs%\All Users\Application Data\117fc\573.mof
%docs%\All Users\Application Data\117fc\mozcrt19.dll
%docs%\All Users\Application Data\117fc\sqlite3.dll
%docs%\All Users\Application Data\117fc\PCLGSys
%docs%\All Users\Application Data\117fc\PCLGSys\vd952342.bd
%docs%\All Users\Application Data\117fc\BackUp\
%docs%\All Users\Application Data\117fc\Quarantine Items\
%docs%\All Users\Application Data\PCYZDUHBELG
%docs%\All Users\Application Data\PCYZDUHBELG\PCAWWLG.cfg
%docs%\%user%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Live Guard.lnk
%docs%\%user%\Application Data\PC Live Guard
%docs%\%user%\Application Data\PC Live Guard\cookies.sqlite
%docs%\%user%\Desktop\PC Live Guard.lnk
%docs%\%user%\Recent\cb.drv
%docs%\%user%\Recent\CLSV.sys
%docs%\%user%\Recent\DBOLE.exe
%docs%\%user%\Recent\FW.dll
%docs%\%user%\Recent\kernel32.drv
%docs%\%user%\Recent\PE.tmp
%docs%\%user%\Recent\ppal.dll
%docs%\%user%\Recent\SM.dll
%docs%\%user%\Recent\SICKBOY.tmp
%docs%\%user%\Recent\sld.drv
%docs%\%user%\Start Menu\PC Live Guard.lnk
%docs%\%user%\Start Menu\Programs\PC Live Guard.lnk
%progfiles%\Mozilla Firefox\searchplugins\search.xml
After the above have been deleted you have completed the majority of your pc live guard removal. You should follow up your manual removal with a scan with superantispyware or malwarebytes antimalware. Then you need to follow up with a scan with AVG/Avira or trend micros housecall or another trusted antivirus product.