Vista Antispyware 2010 also known as Vista Antivirus 2010, Vista Guardian, Vista Antivirus Pro and Vista Internet Security 2010 is a rogue antispyware program that reports false infections and shows numerous fake security alerts as an attempt to trick you into buying the software. This program is installed through the use of trojans. When the trojan is started, it will download and install Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) onto your computer.
During installation, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will register itself in the Windows registry to run automatically every time when you start an application (files with “exe” extension). The rogue also uses this method of running to block the ability to run any programs, including security applications.
Once running, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will start a system scan and list a large amount of infections. All of these infections are fake, so you can safely ignore them. What is more, while the rogue is running, it will display fake security alerts and notifications with “Spyware infection has been found” or “Tracking software found” header. However, all of these alerts are fake.
Last but not least, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) will hijack Internet Explorer and Firefox and display fake warnings when you opening a web site.
As you can see, Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) is scam, it is designed with one purpose to scare you into thinking that your computer in danger as a method to trick you into purchasing the full version of the program. If your computer is infected with this malware, then most importantly, do not purchase it! Uninstall the rogue from your PC as soon as possible. Use the removal guide below to remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) from your computer for free.
Use the following instructions to remove Vista Antispyware 2010 (Vista Antivirus 2010, Vista Guardian, Vista Antivirus Pro or Vista Internet Security 2010)
Step 1. Repair “running of .exe files”.
Method 1
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
Double Click fix.reg and click YES for confirm.
Reboot your computer.
Method 2
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
[Version]
Signature="$Chicago$"
Provider=Myantispyware.com
[DefaultInstall]
DelReg=regsec
AddReg=regsec1
[regsec]
HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command
[regsec1]
HKCR, exefile\shell\open\command,,,"""%1"" %*"
HKCR, .exe,,,"exefile"
HKCR, .exe,"Content Type",,"application/x-msdownload"
Save this as fix.inf to your Desktop (remember to select Save as file type: All files in Notepad.)
Right click to fix.inf and select Install. Reboot your computer.
Step 2. Remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) associated malware.
Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.
Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.
MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.
As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.
Malwarebytes Anti-Malware Window
Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer for Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) infection. This procedure can take some time, so please be patient.
When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian). MalwareBytes Anti-malware will now remove all of associated Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) creates the following files and folders
%AppData%\av.exe
%AppData%\WRblt8464P
Vista Antispyware 2010 (Vista Antivirus 2010 or Vista Guardian) creates the following registry keys and values
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
hmmmmm i did the regedit fix and it worked, there seems to be no trace of that bastard anymore, is that normal? or should it still show up on the MBAM scan?…… it doesnt feel right :p
Thank you,it worked for me
why i have to pay ???????????? :S:S
You have no idea how efficient and helpful this was. I’m a student with many valuable reports on my drive, up at £:am fixing a virus, and your instructions managed to help me so much.
thank you
hello thank you soo much for this VERY excellent info. I had completed the first part of the instructions and saw that the pop ups were completely gone 🙂 i was wondering if i should still download the program as directed in the second part of the instructions seeing that i do not have vista anti-spywear on my laptop and the pop ups have stopped. i would rather not have to download anything else to my computer unless needed. thanks again!!
Charlie, if MBAM did not display any infections, then you are clean. You can also scan your PC with an online scanner.
millions of kisses to you….thank god for your help in saving my laptop……I love you xxxx
this is the best info i have found on the net and the simplest
i tried to do step 1 but when i try to click yes to confirm fix.reg it says “Cannot import C:\Users\User\Desktop\fix.reg: The specified file is not a registry script. You can only import binary registry files from within the registry editor.” im stuck. what should i do?
Thanks everyone! This site really helped me! This thing showed up on my computer today – I have no idea where it came from. Anyway, the instructions here helped me get rid of it this evening.
One thing worth noting – I was unable to use the registry fix file. I ran another antivirus program first, and it found the av.exe and another file. Then I rebooted, and was unable to run programs. Then I found this site, and tried the .reg file using notepad. I was able to get the file onto my computer, but it told me it had to be in binary. So I skipped that step, and ran Malwarebytes. It found another file, and I got rid of it, rebooted, and here I am. I shouldn’t have to do that step with the .reg file, right?
Thanks everyone! This site is great.
Chris, check twice the inserted script.
Oh my god this was the best help I’ve had it worked perfectly thank you so much. I thought that I wouldn’t be able to sort this out but it was explained so well that even I could follow these instructions. Good job and thanks once again.
Followed all the instructions to the letter and glad to say my pc is all back to normal again, don’t have the rogue ‘vista internet security’ quick launch in the system tray anymore and the annoying pop ups have now gone. Tried removing this b*****d with spybot and adaware first but with no success. Many thanks for this advice, you saved me from a lot of frustration not to mention money.
“Note: you need uncheck the “Hide file extensions for known types” option before doing it.”
Yeah thanks for the help. How does one do this? Where is this option?
that was great!! stoped it i can go back onto the internet!!! mbam didnt find anything though so will try it again tomorrow thanks guys!!!
thanks for massive help (:
Hey i am currently trying this on my pc as i got vista guardian on there, one question is the anti malware programme free? or do i have to pay like all the others?
Ok notepad opened with R click- start. Couldn’t see that before.. d’oh.
Sorted now. Cheers.
i was just about to smash my computer up….but it seems to have worked…..you’re a genius.
Alex, click My computer, Tools, Folders Options, open View tab.
Sam, Malwarebytes Anti-malware is free for use. Read more and comments here (scroll down).
Cheers, I had av.exe blocked with Zone Alarm and deleted all references to it through regedit, jus right clicked and run as administrator as all .exe files wouldn’t open! All I had to do after that was delete hkcr_.exe folder and it lives!!! Thanks, Kev
Hi, thanks so much. You’ve saved me. I’ve been struggling with this virus for 3 days and finally found your website. After following your instruction, I got my laptop screen back (in normal mode) and am able to use my programs except for Internet explore. (computer seems to run very slow though) The internet explored is still blocked!!! Please help! What is next that I should try? Thanks again in advance. Tina.
Sorry for the typo. I meant the Internet Explorer.
I’ve done the first part of the process up until the rebooting of my laptop. And I can’t go on the internet to download the malwarebytes Anti-malware because the pop ups are still here. Please help me, what am I doing wrong?
Tina, try the following:
Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck “Use a proxy server” box. Click OK. Click Apply. Click OK.
ty, reboot your PC in Safe mode with networking.
In this mode try download Malwarebytes.
How do I make it “safe mode with networking” ?
Nevermind I figured it out, thankyou so much!
I turned my laptop off and it won’t start up now please help not in safe mode either
just cleaned up my laptop .. thanks a lot