Vista Internet Security 2011 (sometimes Vista Internet Security) is a fake antivirus from the family of name-changing rogues. These rogues install through faked OS security update that originates from infected websites or system vulnerabilties and download random design depending on your operating system. For Windows 7 you might get Vista Antispyware, Antimalware, Security, Guard or their “2011” versions.
After the installation, Vista Internet Security 2011 will disable firewall, task manager and other functions of PC. It will allow launching browsers, but will monitor what do you browse and prohibit visiting many of the websites. You will get warning like this:
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
– Dangerous code found in this site’s pages which installed unwanted software into your system.
– Suspicious and potentially unsafe network activity detected.
– Spyware infections in your system
– Complaints from other users about this site.
– Port and system scans performed by the site being visited.
Things you can do:
– Get a copy of Vista Internet Security 2011 to safeguard your PC while surfing the web (RECOMMENDED)
– Run a spyware, virus and malware scan
– Continue surfing without any security measures (DANGEROUS)
Almost all other files are blocked from execution as they will be called “infected”. This is not true, and removing files that Vista Internet Security 2011 detects as infected might lead to permanently bricking your PC. All programs that are blocked or detected during scan of the system are false positives and harmless. The real infected files are pw.exe and MSASCui.exe, located in application data folder on your PC.
It will also show various alerts, like this one :
Vista Internet Security 2011 Firewall Alert
Vista Internet Security 2011 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.
or
Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
These can be ignored as well, they are only there to scare you into purchasing full version of this rogue parasite.
How to remove Vista Internet Security 2011
Update
It seems like this malware and a new group of viruses changing their names according to OS has renewed its activity. To disable warnings from this parasite and get possibility to scan and remove virus, try this registration code: 1147-175591-6550 or 2233-298080-3424. Do not forget to scan with spyhunter, Malwarebytes Anti-Malware and Hitman pro after that: This key will not disable trojan downloaders or rootkits coming with original infection. If it does not work, continue with removal instuctions for Vista Internet Security bellow:
To remove Vista Internet Security you will need another PC, as removing it from safe mode with networking will not work in most of the cases.
a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:
- Spyware Doctor ( https://www.2-viruses.com/spdoc.exe )
- Registry fix : https://www.2-viruses.com/wp-content/uploads/exeregfix.reg
- You might want to include Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.
b). Boot normally. wait for Vista Internet Security 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs
c) Delete or remove the files that are mentioned in our files box. You can use spyhunter to identify the infected files and additional infections. Do not forget update it before scanning. Remove what it finds.
d) Scan with spyhunter and secondary tools and reboot your PC. This should fully remove Vista Internet Security 2011.
In some cases virus mutates and you can not perform some part of these instructions. In such cases we recommend trying scans from within safe mode, or doing Alternate OS scans by tools from one of antivirus program makers, for example this : http://pctools.com/aoss
I strongly recommend installing legitimate internet security suites and/or purchasing full versions of spyhunter or malwarebytes anti-malware or other good antimalware tools to warn and prevent such infections in the future.
Multiname
Automatic Malware removal tools
(Win)
Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,
(Mac)
Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,
Thanks for registration code. Worked for me.
I’ve been working for hours trying to remove Vista Internet Security 2011 which somehow installed itself earlier on today after opening Firefox.
The registration code worked but I was still not able to run Malwarebytes.
I ran exeregfix.exe and again, was still not able to run Malwarebytes so I ran Spyware Doctor.
This removed a bunch of shit apart from Vista Internet Security 2011 and has negatively affected my computers performance.
I’ve looked into manually removing but the file names must differ from above and I can’t locate anything similar.
The current process running is named vtr.exe
When I right click and choose “Open File Location”, it takes me to %UserProfile%\AppData\Local\ but there is no sign of the file, even after changing the folder setting to make hidden files visible.
When I end the process and try to run Malwarebytes, vtr.exe starts up again.
I’m exhausted.
Ross: The file might be marked as system, make sure you see system files as well.
You might have better results by running mbam or SD in safe mode with networking.
Confused about what to do with the registration code…
i wasn’t very aware of Vista Internet Security 2011 being installed in my computer untill recently i was downloading a file and it came up. At first i thought it was real..im only 13..but these fake alerts kept bother me. It also blocked my internet browers but i got through from ‘my computer’. I’ve used the registration code and now everythings back to normal. I downloaded the spyware doctor. it only told me to delete somekind of norton 360. Im not sure how to get rid of “Vista Internet Security 2011” for good. im noob.
As a solution I opened malwarebytes as the administrator.
Code worked thanks so much guys!!!
I used the registration code, and it says that it uninstalled it and cleaned out my computer, but it is still on my task bar. Help?
Drew: You will have to scan with anti-malware program to fully remove Vista Internet Security
there is only 1 word to describe you my friend and that is genius!! the reg key worked a treat cheers sooo much
None of the registry, files, or keys listed here are visible on my comp. When I tried exeregfix.reg to run my scans, it said: “Windows cannot find exeregfix.reg”. Make sure you types the name correctly and then try again.” I tried the registry code, but even though it stopped the pop ups, I can’t run anything else anymore. Now I can’t run anything if I click on it directly, including all the Windows applications, (even word) Internet Explorer and Firefox. Even “C:\Windows\regedit.exe Application cannot be found” anymore. I tried rebooting in safemode, but it keeps acting like I need to “save” programs to my computer, but I know all of the programs are still there.
I think it’s because at one point when I tried the registration code it said “congratulations, be sure to use this number for support blah blah blah now preparing to remove infected files”. I figured that was not a good thing, so exited out of it. Since then, I can’t even connect to the internet, even though it says I am connected. At this point I’m wondering if even loading Spyware Doctor through USB will help.
Help!!!! My son was playing runescape and vista Internet security 2011 popped up. OMG it was my business laptop and as I’d had a previous drive wrecked I purchased the program not knowing it was fake. I only found out it was fake when the code wouldn’t work and I needed to contact the company so I looked it up on my iPad. Low and behold what I saw was totally gobsmacking. Well this is the problem we now have, he was using another laptop this morning and it has happened again. What can I do to remove from both computers now that they are unusable. I’m not a stupid person but having been caught with virus’ before thought it could never happen to me again let alone twice in the same week. HELP !!!!!!!!!!
Hi, I got HIT by “vista security 2011” this past week. I think I spent the better part of three days working with it as I can’t afford a consultant. That “thing” wiped out all my protection programs in the start-up tray. Must be it’s first “job.” So totally unprotected it ran around causing *.exe programs not to execute. I could not use several things I had to use to fix the computer. I could not find such a file anywhere on the computer. I think I’m half blind for looking. I could not find it in Windows or inside regedit altho’ even regedit did not run at first. This is one stinky “virus…bug…malware” you name it. I could not get onto the Internet with I.E. I got that note you see if a website is not going to load. The bug had changed my home page although for a brief second I could see Google come up with a slide-over from “bug” with that message. Have you tried to read you registry? I’ve been fiddling with that sucker since I knew what it was years ago. I’m very careful with what I touch! I ran searches on each of the bug’s name and then singly. Nada. It was not in Programs or Programs 86. NOWHERE to be found. I’m on Vista Home Premium. As I watched this “animal” work, I realized it was NOT ruining my programs. I could get around except for I.E. 8. So I just switched to Firefox. At the outset I was able to get on I.E. briefly and read Google on this very bug. Then the screen I mentioned. Firefox had NO trouble. I learned the bug is doing something like piggy-backing Internet Explorer 8.0 (maybe 9.0) by reading the entries on Google. I get a box often that asks me if a question was answered (Microsoft) as I went on their program to give feedback to improve MS programs/OS. I told them how this thing was all over the computer and all I had for a while was my old Dell PC (I had to lean on it one day or so as I did not want to send a virus to anyone else.) I would find FREE programs that would clean out this particular bug (i.e., Spyware Doctor was touted as FREE from the “helping” website). I got SD and got it set up to run. I had it scan the entire computer and found many malware items. To fix them I would have to pay about $30 (and I have paid PC Tools a lot of money over the years. This would be a one-time only). I do NOT have funds to buy two programs or whatever so I backed out. That’s when I had to get down and dirty all by my lonesome. I reinstalled Norton which began picking up junk and fixing or deleting. Then I got a copy of MalWarebytes which is neat program (I may be only in a trial, but I wonder if this might be THE best program for this sort of problem…I’ve used it before, and it’s a lifesaver). Malwarebytes went to work immediately and it found many nasties for quite a while. I got tired of answering “yes” but finally it caught many errors, and then it went quiet. It popped up once today (the user has to make the decision as to what to do). One of these programs ran at least 12 hours and was not finished. I have to return to the full scan later. It’s very thorough. I’m sure there are many very good programs that will save your info on the computer.
Just know (at least for me) that nothing is really harmed except the antivirus programs and your body/brain!! I got Norton and I finally got it installed. I ran Malwarebytes after that one and finally the “pretend vista shield” icon down in tray was uprooted. I could NOT get rid of it earlier. I would right-click and do a full click to no avail. I should have logged my HOURS on this, and I know I can be had again, but at least I know to reinstall antivirus and antimalware programs because they catch the bugs in the first moment. But I’m very angry as I need to do other things. I was then thrown out to that page Microsoft sends us (when we agree to it) and wrote a note (the vista nasty looks just like Windows Security which it has damaged so that I have to get at it now) for the techs at MS to look at. I added my email address (you don’t normally send your email address, but sometimes I do so if they can help they will). I heard back in short order that this particular bug is known and in a short time it will be GONE. They found it some time back. It evidently someone who supports (or did until recently) MS/Windows or is part of their techs. I was blown away by that AND that MS would actually tell us that. (One time I needed help a long time ago from MS, and I somehow found a free number for OEM software, and a very nice tech talked with me and walked me through getting my entire OS et al., reinstalled. So try installing the anti-whatever you had on the computer again and see if you can kill the big off bit by bit as I did. Again, your files are quite safe. This was some sort of “gag” this guy pulled on us and Microsoft. I’d love to sue his behind. I think I began on Wednesday on this, and it’s early evening Saturday. Good luck.
I could really use some help here. I don’t know how to properly save the registry file. It keeps saving as .reg.txt. Any ideas?
Ok, we (my dad and I) have tried Malwarebytes, Spybot: Search and Destroy, and some other program that I can’t remember what it was called. We don’t have the money to pay for Spyware Doctor. We can’t get rid of the virus. Is there any other way? My computer has only one account so we can’t go to another and fix it unless I create one and Vista Internet Security is just getting in the way.
Kristin: You can try manually deleting what SD detects. Also, try scanning with Hitman Pro
Thanks for the reg code! But now at the top of my browser it says “Vista Internet Security 2011”. Im running a full McAfee scan right now, tell me, will McAfee be able to remove this scourge?
I just wanna find the creator of this virus and strangle him/her to death with a spork and shove the remains into meat grinder!
This is why you people should not be stupid and download retarded stuff.
I caught the Trojan-BNK. Win32….from Facebook. What a feaking you know what.
1) I was running Microsoft Security essentials at the time.
2) I tried running Malware, I wouldn’t open.
3) I tried Spyware,but it costs.
4) I read a ton of ways to fix this problem including….
5) I tried to get into my Vista registry via REGEDIT, but the computer states it requires THE ADMINSTRATOR. How do I get into my registry via Vista. This is my own laptop. It is not connected to anything other than the internet.
6) What freeware is out there that can solve this problem?
7) And how do I get rid of the Vista warning popup?
Thanks for your advice. Please send it via my email address.
I agree with the spork thing.
My granddaughter got this Vista Security 2011 on her laptop. She did a system restore and this appears to have fixed it. I am concerned that it may still be on her hard drive. What should she do next?
@Hawky
Hey- My granddaughter did a system restore and it went away. Everything is now functioning properly on the laptop. I would still do another scan. But system restore is usually the quick fix.
@SDR
Try a system restore. Got rid of ours.
Hi there,
My computer was infected with this virus over the memorial day weekend. Thank you so much for these suggestions. I’m going to try it out.
quick question: I don’t know how I got this bug and am curious as to what I did to get this bug… I watch tv dramas on websites but do not download anything. Did I catch this bug when I visited a website and watched tv dramas there?
thanks!
@admin
This file is marked as Hidden and System.
You won’t see it in Explorer after booting in Safe mode either.
To see it, run cmd.exe as Admin, cd to the file location and use the following command:
dir /a *.exe
This is real nasty. It’s possible it can spread through a network, I’m removing it from my 3rd network machine. For Vista or higher, you can run processes with right click and selecting Run As Administrator. This should at least allow you to back up whatever you need, as reinstalling the OS is your best bet. The hours you will send trying to remove this, you can restore your machine. I found out free Avast (was a big fan) will not protect you from any spyware.Good Luck.