Vista Antispyware 2010 also known as Vista Antivirus 2010, Vista Guardian, Vista Antivirus Pro and Vista Internet Security 2010 is a rogue antispyware program that reports false infections and shows numerous fake security alerts as an attempt to trick you into buying the software. This program is installed through the use of trojans. When the trojan is started, it will download and install Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) onto your computer.
During installation, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will register itself in the Windows registry to run automatically every time when you start an application (files with “exe” extension). The rogue also uses this method of running to block the ability to run any programs, including security applications.
Once running, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will start a system scan and list a large amount of infections. All of these infections are fake, so you can safely ignore them. What is more, while the rogue is running, it will display fake security alerts and notifications with “Spyware infection has been found” or “Tracking software found” header. However, all of these alerts are fake.
Last but not least, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will hijack Internet Explorer and Firefox and display fake warnings when you opening a web site.
As you can see, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) is scam, it is designed with one purpose to scare you into thinking that your computer in danger as a method to trick you into purchasing the full version of the program. If your computer is infected with this malware, then most importantly, do not purchase it! Uninstall the rogue from your PC as soon as possible. Use the removal guide below to remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) from your computer for free.
Use the following instructions to remove Vista Antispyware 2010 (Vista Antivirus 2010, Vista Guardian, Vista Antivirus Pro or Vista Internet Security 2010)
Step 1. Repair “running of .exe files”.
Method 1
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
Double Click fix.reg and click YES for confirm.
Reboot your computer.
Method 2
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
[Version]
Signature="$Chicago$"
Provider=Myantispyware.com
[DefaultInstall]
DelReg=regsec
AddReg=regsec1
[regsec]
HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command
[regsec1]
HKCR, exefile\shell\open\command,,,"""%1"" %*"
HKCR, .exe,,,"exefile"
HKCR, .exe,"Content Type",,"application/x-msdownload"
Save this as fix.inf to your Desktop (remember to select Save as file type: All files in Notepad.)
Right click to fix.inf and select Install. Reboot your computer.
Step 2. Remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) associated malware.
Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.
Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.
MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.
As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.
Malwarebytes Anti-Malware Window
Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer for Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) infection. This procedure can take some time, so please be patient.
When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian). MalwareBytes Anti-malware will now remove all of associated Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) creates the following files and folders
%AppData%\av.exe
%AppData%\WRblt8464P
Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) creates the following registry keys and values
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
DAMN YOU’RE A GENIUS….I’ve Been Tryin’ To Get Rid Of This Annoyin’ Ass Virus For Bout A Week And A Half Now….& This Is The Only Method That’s Worked Or Even Been Remotely Close To Workin’…….
THANK YOU VERY MUCH!!!!
Method 1 worked fast and easy! thanks so much!!!
Alright, so I had this problem once, and I followed the steps, and used Malwarebytes to get rid of the infection.
The problem is that no matter how many times I do this, the problme comes back. Or, I should say, Vista Guardian itself doesn’t come back, but I end up with the problem where .exe files don’t open, and I have to fix the registry. Then I can open the .exe files, and scans, including Malware bytes’ scan indictates that the computer is clean, and even so, after a while, I try to open a new program, and it seems that .exe files don’t open and malwarebytes’ scans show the same 3 infected files screwing with my registry again. What can I do???
Just want to say thank you Patrik whoever you are. You are the MAN!!
Mark, open a new topic in our Spyware removal forum. I will check your PC.
Hi I did step 1 but cant download the 2nd step thing because it wont let me on the internet. What can I do now?
I have done step 1 and the vista antimalware no longer runs on startup, however when I downloaded antimalware pro my avg said it contained Trojans and I do not know whether this is correct or not because of everything else that has happened. Will every software I try to download contain viruses if downloaded from this laptop because the vista antimalware is still lurking? I can’t download from another computer at the moment as I don’t have one and I’m worried about these things being left on my laptop. Thank you.
THANK YOU SO MUCH!!! Your instructions were so easy to follow. My antivirus program couldn’t remove the threat. Your help is GREATLY APPRECIATED! You save my sanity & my computer!
THANK YOU SO MUCH!
GH, what your computer shows when you trying open any site ?
Kat, open a new topic in our Spyware removal forum. I will check your computer.
your fix totally rocked. thanks for doing the leg work!
OMG!! Thank you soooooooooo much I had idea what this was when it popped up and all I could think was how much is it going to cost this time but thank god I googled it and found you!!! It worked brilliantly I’m so grateful for you posting this so again thank you so much 🙂
This is aweseome!!! I had no idea that this was a virus. I was told to look up this website and I’m sooooo glad I did. I am so grateful and I will let everyone know that they need to come to this website for help.
Omg omg I’m in deep trouble haha
I had this virus and managed to get rid of it by putting my pc into safe mode and running mbam and it went, but it came back, but was way worse. The keys are now permanently in the system and I tried the same thing again but the virus shut off access to the internet. We took it to the repair guy and he supposedly found the virus but it came up again. We worked out it was a file on my user accountan so he went through the pc again and said he found something on my account and had defo got rid of a virus
HOWEVER. We got it back today and I had a look at the regeit just to be sure and there it was, sitting in my registry, the damn virus. I tried the registry repair methods at the top, the first one (fix.reg) did not work and the second (fix.inf) made all of my exe not work
…Wth!!
All my exe files and basically applications would NOT open
Ran mbam as an administrator and found a “broken command” root key
Got rid of the suspected infection, rebooted the pc to complete removal, and surprise surprise the virus is STILL in the registry! All my exe and applications work again but its like what else can I do?! Please help!
Thanks a million. Saved my life, my uni life and dads wallet haha god u people are smart lol
eilish, open a new topic in our Spyware removal forum. I will check your PC.
Ohhhhh my god……..you saved my life. Thank you so muchfor your help…..
Thank you so much, never clicking on Swedish links again. Eat it, An7hrax.
hi 🙂 so i have this virus and it’s blocking off my access to the internet. so i’ve used this computer to download both spyware doctor and malwarebytes anti-malware and copied the files onto my infected computer, but i can’t seem to get the programs to run on the computer. there isn’t an install file in the program files … and i cant directly download it on this computer because i dont have access to the net .
i also tried the fix.reg thing on my computer, wouldnt open, something abuot binary code …
Great used method 2 and malwarebytes worked a treat thanks a lot will spread the word for this site
Great worked a treat used method 2 and malwarebytes, will spread the word for this site
thanks a lot
Whenever I try to open the command menu or notepad for method one, the virus tells won’t let me open either of them. Same with the MalwareBytes program–it’s installed, but the virus won’t let it run. Can anyone help?
Remy, try method 2 (fix.inf).
Nathan, you have typed “command” (w/o quotes) ?
very best worked………………..
fantastic solution! worked instantly while other ides failed! thank you very much! good luck for the future!
after scanning and clicking on remove selected on malwarebytes then restarting computer, do i need to go to quarantine to delete all? thanks in advance.
Iss, yes you can remove all “infected” entries.
I type Command and a black box open. but it is close before i can type notepad. What should I do now ? Please help
Hi there. I had this virus pop up while I was surfing the web, and knew something was off. I got rid of the virus using AdAware (I hope), and also used CCLeaner.
Somewhere along the way, I must have done something wrong. I can no longer access the internet, although my network seems to be connected and everything looks to be in order. I can run other programs on my computer (Adobe Photoshop, AdAware, etc etc), but internet explorer simply does not connect to the internet. Any ideas?