Vista Internet Security 2010 - How to remove

Vista Internet security 2010 is a new version of OS-specific rogue  antiviruses. To be more precise, it is a same fake antivirus like XP Or Win 7 Internet security 2010, you will see a different name according to your OS though.  It is a scam that should not be taken lightly. Although threats Vista Internet Security 2011 shows in its scan logs are false, your Vista PC got serious infection – the rogue promoting trojans.  You might get them by clicking on infected facebook/myspace ads or by downloading  useless shareware or fake codecs.

A typical Vista Internet Security 2010 popup/alert looks like this:

Vista Internet Security 2010 Firewall Alert!
Vista Internet Security 2010 has blocked a program from accessing the Internet
Internet Explorer is infected with Trojan-BNK.Win32-Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security  may be compromised. Sensitive data can be stolen. Prevent damage now by completing security scan.

Do not believe alerts like this and get rid of Vista Internet Security 2011 as soon as possible. To avoid problems in the future we recommend having both a reputable antivirus program like ESET NOD32, Kaspersky and good anti-spyware with real time protection.

Updated removal instructions:

If you follow the manual removal instructions don’t just delete registry values, replace it with “%1” %* otherwise you will not be able to open any applications. The same might happen if you just simply delete %Documents and Settings%\[UserName]\Application Data\av.exe file. First of all you have to fix certain Windows registry values. Here’s how to do that:

1. Click Start->Run (or WinKey+R). Input: “command”. Click OK.

2. Type in “notepad” as shown in the image below and press Enter. Notepad opens.

3. Then copy and past the following text into Notepad:

Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\.exe]
@=”exefile”
“Content Type”=”application/x-msdownload”

4. Save file as “exefix.reg” (without quotation-marks) to your Desktop. NOTE: choose Save as type: All files

5. Double-click to open exefix.reg. Click “Yes” for Registry Editor prompt window.

6. Download Spyware Doctor or an automatic removal tool below.

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Manual removal

Removal guides in other languages

126 responses to “Vista Internet Security 2010

  1. I keep downloading spyware doctor in safe mode, but the Vista 2010 virus keeps popping up. This stinks!

  2. Karen : First, check if av.exe process is running.
    Second, try renaming spydoc.exe to spydoc.pif and executing it then – Internet Security 2010 might mess up your registry settings to prevent execution of .exe files

  3. my system was infected with ‘vista internet security2010’. i read this thread, and read the instructions given. but before first i did the thirst step.i deleted the av.exe. and now i cant open any application. nothing, not explorer, firefox, not even microsoft paint. please help me, and tell me what to do.
    thanks in advance

  4. Hakan : find in C:\Windows file regedit.exe. Copy it to regedit.pif and launch it. Then Delete all keys mentioning av.exe . That should fix the problem

  5. thanks for the quick response. i copied regedit.exe to regedit.pif and launched it. it asked me for the security option. i clicked yes, but then there is nothing. which means it was not launched..:(
    please help,thanks

  6. Thank you ever so much. That annoying pop-up kept on coming but luckily I uninstalled it. So, basically, the FAKE anti-virus software was the trojan itself!

  7. Hi … This is weird but I havent ever downloaded Windows Vista Security 2010 AlERT

    it keeps popping up …its screwed my computer completely .. My Internet Explorer refuses to come up… I am online right now fortunately only becuase of Google Chrome… Its infected IE. Everytime I try to open something it just pops up saying this site is dangerous… and the vista thingie comes onto the site screen – not even as a popup. I have never downloaded it before.

    I tried checking in the uninstalling programs section but couldnt find it there either. How did it get onto my computer ? What do i do?

    I had however, once sent a mail to some madman from Nigeria who kept asking me for my bank account details as I had won yahoos lottery.

    He did hack my account then.. he would send me anonymous messages on my email id …since he could see I had visited gay porn sites. Would state how it was a wrong thing to do etc. i spoke to the cops who say nigerian people are all thieves and i shouldve avoided them .

    What do i do to get rid of this mess.. is this vista downloaded courtesy this crazy hacker ?

    Please help !

  8. Can someone just tell me how to get rid of this Vista 2010 virus without faking and making me buy another bloddy spyware shit spftware like spydoctor…

    Wtf! Why is every one fooling the rest ?

    is there a manual way of removing this shit . I will rather reformat my comp than put my money to the dogs by buying another goddamn antispyware…. i have SPYBOT thats enough for me … and its doing nothing to stop this problem …

    I will NOT buy Spydoctor now.. ridiculous !

  9. i was online last night and sudd all these scans started up! then as above vista 2010 said i had 17 virus. i couldnt use my explorer the same page kept displaying! i have full paid up version of norton 360 yet didnt find this virus why!!!! i am cluless when comes to c’puters and im only online now, coz i restarted my pc and made a new user name

  10. Hakan: You will have to fix registry. Can you launch system restore or access annother account on your PC? The virus is gone, but its traces mess up a PC.

  11. I’ve also managed to catch this trojan somehow. I had an (expired) version of Norton Internet Security installed at the time. I have since installed both spydoctor and AVG free edition V9 and neither can detect this threat, let alone remove it. The av.exe file is located in C:\Users\[Username]\AppData\Local\av.exe as stated but I can’t find it in file manager (and yes I have enabled view hidden files in the control panel) so I can’t figure out how to delete it. Anyone have any advice on how to actually get rid of this thing?

    If it helps anyone, I’m able to bypass the trojan’s attempts to block internet access and install software by right clicking and chosing “run as administrator” and just closing the process av.exe whenever it starts up in task manager.

  12. Rick: Try using GMER and check if there is something suspicious. This is a sign that Vista Internet Security started using another trojan or rootkit. Submit a sample to PCTOOLS as well, please

  13. @Mithone you have to follow the steps above in the Remove these Vista Internet Security 2010 Registry Entries to manually remove. first goto task manager and processes then stop any av.exe processes(do not launch internet explorer or firefox) if your not sure about tampering with your registry folders just rename the folders that are mention so it cant find them and yes i am nigerian so we are not all thieves. advice is to use google chrome more secure

  14. andrew :
    @Mithone you have to follow the steps above in the Remove these Vista Internet Security 2010 Registry Entries to manually remove. first goto task manager and processes then stop any av.exe processes(do not launch internet explorer or firefox) if your not sure about tampering with your registry folders just rename the folders that are mention so it cant find them and yes i am nigerian so we are not all thieves. advice is to use google chrome more secure

    also check for any files created around the same time in appdata folder with av or a strange name like wdam731CN you may also need to run Start the System File Checker

    * In the Command Prompt window, type: sfc /scannow,
    * press Enter.
    * You’ll see “the system scan will begin”.

    The scan may take some time and windows will repair/replace any corrupt or missing files. You will be asked to insert your Vista DVD if it’s needed.

    Close the Command Prompt Window when the job is finished.

  15. I tried downloading and using GMER and found the av.exe file. When I tried to create a copy for submission my computer crashed and rebooted so I was unable to do this for you. Having read up on rootkits and the potentual dangers of them introducing back doors/re-spawning and with no easy or sure way of getting rid of it I opted for a full re-installation of windows vista which appears to have solved the problem. Thanks for your advice. I’d urge anyone else having a similar problem locating and dealing with this virus to read up on rootkits on wikipedia.

  16. hey i seem to have caught this trojan, my issue is very similar to rick apart from i have Pctools full version. iv scanned and scanned and scanned and it showed me i had trojans etc and then deleted them but the problem perisisted. is there a special way to use this program to find this damn thing other than full scan? i just got the program last night ( my dad uses it so i got a code from him) and not really sure how to use it other than to scan.
    Now when i turn on my PC it dosent let very much load until i cancel the av.exe so the issue has gotten a little worse i suppose.

  17. A daft question but what does copy to regedit.pif mean? I’ve found regedit.exe but don’t know what to do with it??? Please help.

    Thanks

  18. Hi i stopped the proccess and now cant open anything on my computer!!! How do i do this regedit copy thing?

  19. I followed the steps here and now nothing on my PC will open. I get this error “This file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel.”

    On the top of the error box is this: “C:\Windows\System32\rstrui.exe”

    HELP???

  20. My computer has been attacked by this “Vista Guardian 2010”. I am unable to open an files, and I can no even get to my internet without it saying windows can not reaches these files because it is not permitted.I need help getting this off my computer as soon as possible because I am unable to do any work. I have tried the regedit but that is the only name for it

  21. @admin what do you mean copy it? i cannot open any programs etc. and I have no idea what youre talking about :S i found regedit.exe but I dont know what do with it, please help? thanks

  22. I called Microsoft and their recording says before they will assist you on the phone to remove this VISTA INTERNET SECURITY 2010 malware/virus to go to:

    http://safety.live.com

    – They want you to run the full service scan which should remove most of the problems that this pop up is causing… I know with me, I cannot even get on to many websites, etc because the warning page comes up instead of the address I key in, I must have the virus pretty bad. I myself have not been able to accomplish this as yet because whenever I type in a new URL, I get the malware popup and I can’t get past it for anything (the only reason I was able to get here was using my laptop from my job). It would be great to know if this works though.

  23. Brigitte Pedersen : Create exefix.reg and launch it. Then disable proxy server in your browser. Then microsoft can tell you to download good anti-malware program or delete manually. Same like this guide. 🙂

  24. I created exefix.reg and launched and I cannot open up ANY executable files. I cannot retrieve my income tax return, etc – this is REAL bad… HELP?!?!? I CANNOT download PC doctor b/c it’s an .exe file. I tried to save as .pif and that won’t open. The error message when I try to open it is:

    ShellExecuteEx failed; code 1155.
    No application is associated with the specific file for this operation

  25. @admin
    I created the exefix.reg file, but everytime I try to launch it I can the following message: “The specified file is not a registry script. You can only import binary registry files from within the registry editor.” Can you please suggest a solution? I copied and pasted the above text directly from this website. Thanks Alex

  26. I have a follow-up question. I was finally able to run the exefix.reg file. And I ran PC Tools Spyware Doctor, which claims to have removed the Vista Internet Security 2010 trojan/virus. After restarting my computer, however, I now can’t get IE to load. Any suggestions? Other executable programs (e.g., Word, Acrobat, etc.) seem to be loading properly.

  27. @Brigitte Pedersen
    Brigitte, copy and paste the following content exactly in Notepad and save it as somename.reg (not somename.reg.txt). Double click on somename.reg to merge these entries into Windows Registry. Reboot your PC.

    Windows Registry Editor Version 5.00

    [-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
    [-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
    [-HKEY_CLASSES_ROOT\.exe\shell\open\command]

    [HKEY_CLASSES_ROOT\.exe]
    @=”exefile”
    “Content Type”=”application/x-msdownload”

    [-HKEY_CLASSES_ROOT\secfile]

  28. my boyfriend feleted all the file from registry first, then none of his programs would open, we got passed this by hitting winkey+R to open the run window, entering command toopen command window, then changing directories to C:WINDOWS\regedit.exe. Once in the editor we made sure these entrys

    HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
    HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
    HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
    HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*

    were changed to just show the value %1%
    this enabled programs to work again.

  29. Im also having the same problem. I removed the vista internet security 2010 because it was more of an annoyance then an issue. I used spyware doctor and now no .exe will open up, cant get into my registry, and it cant seem to locate any .exe files when i try to open them from the run command. Help would be appreciated.

  30. I am having the same problem as Angela. After having loaded the exefix.reg, now I cannot open any file on my computer. Please help.

  31. I did all of the above. Followed all the steps. I got the Spyware Doctor and it removed all the infections including the Vista Internet Security. HOWEVER now nothing works… I cannot open any of the programs starting from Explorer, Word, Task Manager, and even MSN. I can run if i right click and specify “Run as administrator” for each program I wanna use, blah…

    I have done the notepad registry procedure more than once and still no change. The message I get from the registry editor is “The keys and values contained in C:\Users\…\Desktop\exefix.reg have been successfully added to the registry”.

    But still when I try to just click any program it gives me the “The file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel” message.

    Please help out!
    Thanx.

  32. @J
    J, I could kiss u right now, wherever u are in the world. If anyone is looking at how to fix this J’s post is the one that works!!

  33. Hi All,
    I cleaned the Registry as advised above and I found and deleted av.exe. However, I cannot find “WRblt8464P”. Any ideas where this can be located?

    PS. After cleaning Reg and deleting av the internet started working (hence making this post). Should I worry abt finding WRblt8464P?

    Thanks!
    Sergey

  34. One more question. When I was cleaning my Registry the value of the last two entries were shown as “0” and not “1” as advised above. I did not change them for “%1″ %*, but left “0”. Or should I?

    These are the reg lines I am talking abt – Mine are shown with value “0”, not “1”:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

  35. Segrey: If your original antivirus launches, everything is ok. If you can not find WRBlt…. Sometimes viruses use random file names. I would guess a scan with a good scanner would not hurt, but if you see no popups for a while – you should be ok.

  36. Hi,

    To remove the virus I have manually worked on the registry keys because if I copy paste the commands on note pad and if I save it as .reg and as all files type and if I run that file it says it can not import. So I manually did all the reg edits and then I found out that no application launches and it says “this file does not have a program associated with it for performing this action. Create an Assocition in the Set Association Control Panel”.

    I even can not open the cmd window, regedit window. CAN SOMEBODY PLEASE HELP ME WITH THIS.

  37. Coooooooool.. I have got it to work by god’s grace.. ohh man.. that was really horrid ..

    Just copy and paste the lines between quotes and copy to text file and save it as .reg file (select the save as type as “All Files” save it to the desk top and clikc on it.. that would do it.

    ” Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\.EXE]
    @=”exefile”
    “Content Type”=”application/x-msdownload”

    [HKEY_CLASSES_ROOT\.EXE\PersistentHandler]
    @=”{098f2470-bae0-11cd-b579-08002b30bfeb}”

    [HKEY_CLASSES_ROOT\exefile]
    @=”Application”
    “EditFlags”=hex:38,07,00,00
    “FriendlyTypeName”=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,\
    00,6f,00,6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,\
    32,00,5c,00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,\
    00,2c,00,2d,00,31,00,30,00,31,00,35,00,36,00,00,00

    [HKEY_CLASSES_ROOT\exefile\DefaultIcon]
    @=”%1”

    [HKEY_CLASSES_ROOT\exefile\shell]

    [HKEY_CLASSES_ROOT\exefile\shell\open]
    “EditFlags”=hex:00,00,00,00

    [HKEY_CLASSES_ROOT\exefile\shell\open\command]
    @=”\”%1\” %*”
    “IsolatedCommand”=”\”%1\” %*”

    [HKEY_CLASSES_ROOT\exefile\shell\runas]

    [HKEY_CLASSES_ROOT\exefile\shell\runas\command]
    @=”\”%1\” %*”
    “IsolatedCommand”=”\”%1\” %*”

    [HKEY_CLASSES_ROOT\exefile\shellex]

    [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
    @=”{86C86720-42A0-1069-A2E8-08002B30309D}”

    [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\UserChoice]

  38. hi im installing the spyware doctor as i type however i have a queation can i not simply restore my pc to an earlier time?

  39. @admin
    To Admin: Thank you! All works OK so far (touch wood!). I also successfully ran Onecare full scan (http://safety.live.com) as it was mentioned on this forum, which I found very useful and free :)!

    For info, I believe I got this virus from e-bay since this was the only site I was using recently…

  40. How am I supposed to fix this when my destop is completely black, there is no start button at the bottom of the screen and when I press WinKey+R nothing happens. The only thing that shows up on my computer are the messages that tell me I have a virus. I got here from the webpage that opened up trying to get me to buy the antivrus software.

  41. @Alex
    Alex:

    How did you get the registry file to run? I get the same issue with not being able to run the registry file with the error message of the binary . . .

    Thanks

    Rody

  42. @tony —

    See if you can get to the http://safety.live.com web page and install/run the OneCare safety scanner. and it may clean it up.

    I had the same thing but am comfortable with registry edits and working with the DOS command prompt window. If you are too then you can shut off the computer power and then restart windows in safe mode with command prompt and do some manual fixes (fix/remove av.exe entries from the registry and delete the av.exe and another file in C:\Users\[user name]\AppData\Local\ or whereever regsitry indicates the av.exe file lives) to get computer working again and then do antivirus afterwards.

  43. hey – I had the same problem and just got it fixed doing the stuff on this page.

    to get the registry file to run:

    make sure you copied ALL of the text including the “Windows Registry Editor Version 5.00” – I left this out the first time and got the same error message.

    someone here gave good advice on how to bypass programs not working – right click and click run as adminstrator

    that’s how I got the spyware doctor running.

    As soon as I downloaded spyware and restarted my computer the program was gone – not quite sure how that worked but it did so I’m fine.

  44. hey Admin, can you help Briggite and me out?

    I ran the exefix.reg as well and as a result of that whenever I try to run any program I get a popup that says ‘This file does not have a program associated with it for performing this action. Create an association in the Set Associations panel.’ How do I undo exefix.reg? Vista Internet Security is gone, however now I have a new problem and I’m afraid a completely unknown one… Please help!!!

  45. I keep getting messages from Vista Internet Security 2010. i know its bs and i keep scanning with Trend Micro. I also have the stupid fake sheild on the bottom of my screen! id like to dry cuz my computer is soo new! I REALLY hope this works!

  46. I DON’T KNOW HOW BUT YOU DID IT AND I’M SO GRATEFUL

    Thank you thank you thank you!!! I couldn’t open my iTunes or Word and it was driving me crazy!!! Yes! You genius you!

  47. J :my boyfriend feleted all the file from registry first, then none of his programs would open, we got passed this by hitting winkey+R to open the run window, entering command toopen command window, then changing directories to C:WINDOWS\regedit.exe. Once in the editor we made sure these entrys
    HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
    were changed to just show the value %1%this enabled programs to work again.

    I was unable to run Regedit.exe since all executable programs were effected. I was also unable to copy and rename the regedit.exe to regedit.pif in Vista.

    I restarted Windows in Safe Mode (tapping F8 during reboot) and selected SAFE MODE WITH COMMAND PROMPT and then I entered “C:\WINDOWS\regedit.exe” and followed J’s instructions just leaving %1% as the value. It worked perfectly.

    Please note the backslash after C: (J was missing that).

  48. Hi I’m having the same problem as everyone else. Has anyone gotten the problem resolved yet? Will restoring to an earlier time solve this?

  49. Okay saw your warning: “If you follow the manual removal instructions don’t just delete registry values, replace it with “%1″ %* otherwise you will not be able to open any applications. The same might happen if you just simply delete %Documents and Settings%\[UserName]\Application Data\av.exe file. First of all you have to fix certain Windows registry values.”

    Too late, we can’t open any applications. Help – how do I retrieve?

  50. I no longer have the .exe folder under the classes folder. I think that’s why the exe fix isn’t working for me. How do I go about getting it back on there?

  51. As soon as I saw the pop-ups from Vista Internet Security 2010, I did a System Restore to 3 days previously. Pop-ups disappeared and i had no further problems. Seemed a very simple solution compared with all the comments above. (I previously posted this advice but it seems to have disappeared!)Does anyone know if anything would still be running in the background?

  52. I deleted the av.exe file and finally it seems that I have control of my computer. I tried to open IE, but it now won’t open. It opens the “what program do you want to use to open this” window. This is happening with all programs. I click on IE, then it brings the dialog box to run or save as if I am installing, but it just keeps looping. The only way I can open is right click-run as admin. Any suggestions?

  53. hi all i paid for vista internet security..for six month..after that everything is ok…and now i am not able to open IE…when i try to open..it comes other screen…it says..open with….pls help me to solve the problem

  54. I feel like such a dumb s**t…what if we bought it..? Is there a way to cancel that transaction..? Or am I screwed?

  55. followed just about every piece of advice on removing this god awful virus..did insrtuctions above, not sure if i did it correctly though, have run malwarebyte programme, spy bot, windows live one care, avg, secunia all since i got this bug. now the virus seems to have vanished luckily but now i cant use internet explorer from my desktop icon unless i right click and click on browse without add-ons. it just says application not found. and without add-ons i cant view videos or anything. now im not computer literate so can anyone please tell me how to sort this mess out in simple terms..its driving me mad and im so close to throwing my pc out the window!!!

  56. I started though the steps did the registry note pad thing and now I can’t open ANY exe file…should I restart my pc?

  57. Blehh. Noticed this virus today, and I’ve been trying to remove it since – in fact, I SEEM to have removed it, but there’s still several useless trash files littering my harddrive probably due to it, and, most annoyingly, my internet connection is slower than I’ve ever seen it. Ever. Scans say my comp’s fine, but the sudden drop in speed is so noticable; it makes my computer borderline unusable. My question is, is there a way to remedy this? I’ve followed all the directions and such so far, so I should theoretically be fine at this point. I’m not, so…

  58. seems like it was just a problem with explorer obviously the virus had completely corrupted it. after trying everything possible i gave up and removed explorer and installed google chrome as my new browser…now everything is working perfectly!

  59. this bs prevented me from doing my online homework which was due today. i hope the asshole responsible for this dies a slow and very painful death! even though i managed to open the eset smart security and scanned for my life the bs virus now only pops up when i try and open internet explorer and my internet cuts off and comes on on it’s own.. should i still do the exefix.reg cause people seem to have a lot of problems doing that or is there another simple fix. i’m using firefox to write this.

  60. I seem to have a different problem from everyone else. I followed all the steps, and then ran Spyware Doctor. But, Spyware Doctor still can’t find the problem. Is there anything else that I can do?

  61. Ron : Update and run spyware doctor again (full scan). If it can’t fix problem, contact spyware doctor support and they will look at it.

  62. I was infected with this last night. I just did a system restore for 2 days earlier and it cleared it. I them ran Malwarebytes’ Anti-Malware and it found a couple of problems but the Vista Security Virus was gone. Give it a go!

  63. I’m having a hard time trying to get rid of this Vista Internet Security 2010…

    I tried to end the process for av.exe, but it kept popping up every time I tried to do anything on the computer… So what I did but shouldn’t do was I went to av.exe processes and open properties then go to the security tab and changed permission for system… I edit and then checked deny all permission for the av.exe.. and thought this was going to solve the problem… and boy was I wrong.. the app is connected with my firfox and most of my other programs on the pc.. every time I tried to run a program now I have to right click on the app and click “run as administrator”…. I tried to undo what I did but the av.exe in the processes is no longer there… I don’t know what to do anymore because I can’t find the av.exe in processes anymore and restore to previous dates was too late because I guess I waited too long, when I did restore to the earliest dates I still have to “run as administrator” in order to run any app… Should I go get it factory restore and lose all my computer data and give up???? Please HELP!!!!!!!!!!!!!

  64. Need help ASAP! I’m here at work and this vista internet security popped up! I use this computer everyday for work and because of this I can’t get work done!! How can I get my computer to wok again!!! Please HELP!!!!! I need to work!!

  65. Will since I didn’t get anybody to respond, I called Norton any they helped me get the vista shit off. I paid $100.00 for it but it’ll be off my computer. Maybe u can give that a try….

  66. I just got this crap an hour ago. I couldn’t use that computer so I went to my lap top to look up “Vista Internet Security 2010” which I suspected was spyware or something. I was able to run a sweep of my Spy Sweeper on the infected computer. The sweep caught it and I quarantined it. Restarted the computer and everything seems fine now and the Spy Sweeper says I have no active alerts.

    Running a system restore also seems like a good idea but since mine seems fine now I figure I should just leave well enough alone.

  67. I got this thing, and it is preventing me from going on the internet and I have no idea how to get rid of it.

  68. Now I am really pissed, I have online schooling and this stupid thing has messed my internet up royally. I don’t even know how it downloaded. Thanks to a bunch of bored nerd f*gs who have nothing better to do than to mess up peoples computers, I can’t even do school work-to you immoral hackers GET A LIFE!

  69. @Sandeep

    This worked! Much thanks! Had originally deleted the registry keys and couldn’t start any executables. Fortunately I already had notepad running. (I had closed regedit and couldn’t restart it).

  70. Note: I was referring/replying to post #45. If you can get a text editor to work, and can’t open regedit, Sandeep’s instructions in post #45 works.

  71. The information on this page worked like a charm for me and I was successful in removing the malware and fixing the damage it had done. It originally infected my computer about two weeks ago.
    Today I was infected again, however it was no longer listed as av.exe in the Task Manager. After doing some research I found it was running in the Task Manager under the file name MSASCui.exe. They have changed the name because msascui.exe is a legitimate file name used by Windows Defender. The way to tell if your msascui.exe running in the Task Manager is legitimate is to check the file location under Properties. The legitimate file should be located in C:\Program Files\Windows Defender. The virus was located in C:\Users\Owner\AppData\Local.
    After deleting the program the registry editor still worked to reset my file associations and open .exe files.

  72. Mike in Pennsylvania :

    J :my boyfriend feleted all the file from registry first, then none of his programs would open, we got passed this by hitting winkey+R to open the run window, entering command toopen command window, then changing directories to C:WINDOWS\regedit.exe. Once in the editor we made sure these entrysHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*were changed to just show the value %1%this enabled programs to work again.

    I was unable to run Regedit.exe since all executable programs were effected. I was also unable to copy and rename the regedit.exe to regedit.pif in Vista.
    I restarted Windows in Safe Mode (tapping F8 during reboot) and selected SAFE MODE WITH COMMAND PROMPT and then I entered “C:\WINDOWS\regedit.exe” and followed J’s instructions just leaving %1% as the value. It worked perfectly.
    Please note the backslash after C: (J was missing that).

    THANKS A LOT YOU 2! i was dying here trying to remove Vista Security and then getting all my files to start working! THIS IS THE POST TO LISTEN TO!

    Cheers

    xx

  73. I turn on my laptop and sign and the Internet vista security pops up with a black background and when I close it the bacfround stays black. How do I get passed that?

  74. I was infected with Vista Internet Security 2010 today and found this website after perusing a few others. I did exactly what was written in steps 1-6 on this webpage, including downloading and buying the registration for Spyware Doctor. It worked!
    While simply downloading Spyware Doctor did find the malware- you do have to register ($29.99) in order for it to fix and delete Vista Internet Security 2010.
    After doing the above I went to CNet, a very reputable technology review website, and Spyware doctor is highly recommended and safe!

    Just wanted to pass along to others that this worked for me if others are questionable- which I was!
    Good luck!

  75. This virus got my computer somehow too …. was working on my homework and all of a sudden it popped up. Here’s how i got it running again. First go into safe mode without networking or turn it off on the laptop/pc if you have a wi-fi switch. Go to “start search”, type in regedit. Ctrl-F, enter “av.exe” and click ok. It would search your registry for av.exe. Delete the av.exe registry keys and keep searching by pressing F3. Delete the av.exe file from the local folder. Then reboot your machine. Doubleclick on the exefix.reg to repair your registry. I fortunately kept backup copies of my old registry which I use to recover as well. After all this, most files and links work except for IE link. I just went to “C:\Program Files\Internet Explorer\iexplore.exe” and right click to create shortcut to desktop. I think I might have used the vista association reg fix as well. Good Luck.

  76. This really helped me alot, i randomly had the Vista Internet Security 2010, not knowing that it is a virus. After searching a few other sites, i found this one easy to follow. The process took me no time at all. Thank you very much!
    & good luckk!

  77. To whom it may concern:I got the vista internet security parasite on my computer.I did not know at the time.I purchased this software not knowing about this problem.Can you tell me how I can get my money back Thank you Shaun Reed

  78. Okay.. im using my other computer and im really stuck. My new laptop, (well… it was new like 5 months ago,) has gone crazy with this piece of crap program. It simply came out of nowhere when i was browsing the internet. One thing led to the next and i wasn’t even allowed to leave my homepage on the internet. If i open the internet, it immedietly takes me to this stupid page saying it’s too dangerous, even if im on google! I click the link below that says ‘continue w/o protection’ but it takes me there again. So, i won’t be able to use this program since i can’t open any websites. Help??

  79. I got this stupid vista security last week, then i system restored it.

    BUT, now it suddenly popped up again!!!!!!!!!!!!!!

    so i’m assuming system restore only work for a short period of time, not permanetly.

    Then i tried the 6 steps thing on here, however looks like the spyware doctor if not free to remove the viruses……

    any other way to remove those damn thing for free??

    i read the “Manual Vista Internet Security 2010 removal” but it seems complicated, i don’t get where to put those codes or entries thing….

    plz help me…..

  80. Jacko : system restore or many of the removers without real-time protection will not protect PC from reinfection. I would recommend getting good antivirus and good anti-malware program with real-time protection.

  81. @admin

    i have couple antivirus right now including McAfee, Melwarebyte, Spybot S&D, SUPERanti-spyware. But i’m not sure if any of them are effective.

    and i don’t know if they have real-time protection or not….

    can u please tell me some good and FREE antivirus with real-time protection?

  82. Jacko : Mcafee is antivirus and personally I dislike it. From your list it is the only antivirus product, so I would keep it or change it to AVAST or Avira. They are better and free. From paid ones I like ESETs Nod32 ( I use it myself). My PC runs much faster (no mini-freezes) once I removed Mcafee and installed Eset’s Smart security as well. However, your experience might differ, depends on OS and versions.
    From antimalwares I would use either Spybot or superantispyware for real time protection. Neither of them is too good. So I would feel much safer if I had paid Malwarebytes or Spyware Doctor. Both react faster to latest threats in my opinion.

  83. Hi to all!
    After following the instuctions above to remove Vista Internet security 2010 I have the same problom like Jessica. When I turned on my laptop my desktop was and still is black.There is no icones, there is no nothing exept blackness. The thing that opens when I turn on my laptop is folder “Documents”. I tried to fix the problem with File association fixes for Windows Vista from this site http://winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html , but it didn`t hellped…. Pls tell me how to fix this ;( ?.. Also I`ve noticed after searching my setup that I can`t reach it: “setupapi.inc there is no program to associate with” was the message… Again pls help me

  84. Hi,
    After following the instuctions above to remove Vista Internet security 2010 I have the same problom like Jessica. When I turned on my laptop my desktop was and still is black.There is no icones, there is no nothing exept blackness. The thing that opens when I turn on my laptop is folder “Documents”. I tried to fix the problem with File association fixes for Windows Vista from this site http://winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html , but it didn`t hellped…. Pls tell me how to fix this ;( ?.. Also I`ve noticed after searching my setup that I can`t reach it: “setupapi.inc there is no program to associate with” was the message… Again pls help me
    @admin

  85. Senur: Your problem sounds the same as mine was.

    Have you tried restarting in safe mode as described here?

    Mike in Pennsylvania :

    J :my boyfriend feleted all the file from registry first, then none of his programs would open, we got passed this by hitting winkey+R to open the run window, entering command toopen command window, then changing directories to C:WINDOWS\regedit.exe. Once in the editor we made sure these entrysHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*were changed to just show the value %1%this enabled programs to work again.

    I was unable to run Regedit.exe since all executable programs were effected. I was also unable to copy and rename the regedit.exe to regedit.pif in Vista.
    I restarted Windows in Safe Mode (tapping F8 during reboot) and selected SAFE MODE WITH COMMAND PROMPT and then I entered “C:\WINDOWS\regedit.exe” and followed J’s instructions just leaving %1% as the value. It worked perfectly.
    Please note the backslash after C: (J was missing that).

  86. my computer wont let me do anything, it just restarts over and over again, if they want people to spend money, how come it completely destroyed my computer?

    is there anyway to fix this?

  87. My Computer was infected and I pay for muy 6 months $51,57 @04/05 but I don,t have de # Key number and I don’t recived nothing yet, help:

    Thank you
    Pilar

  88. I am using window Vista there is no “run” when I click start, I have paid for the Spyhunter and clicked remove the virus, however, those annoying pop up still there and everytime i turned on the computer they are still poping up, please help me, they dont allow me to access internet explorer, but i downloaded the other internet browser it can access to the internet now but i hate those pop ups and i want my internet explorer back

  89. I’m trying to remove the virus manually because none of my virus scanners can detect it (not even spydoc can find it), but when I look for the files/registry values/processes to delete, they don’t seem to exist. I have view hidden files mode on, but they simply don’t show up anywhere. There is a process called “ave.exe”, but I’m not sure that I should delete anything that isn’t exactly what’s written here. The command function didn’t work the same way, either, and most of the folders I look in have slightly different names than provided on this site.

  90. @Amanda
    You can find “Run” on vista by opening start and looking at the bottom underneath the scrollbar where you’ll see a “start search” field, and then enter Run there. I was having the same problem with finding Run until I found that…

  91. Does anybody know a name or address associated with this scam/virus? I know a couple of guys that would like to meet him/them. Something about disecting them with a blow-torch to see what makes them tick.

  92. why would you make a update manditory if most of the victims of vista spyware cannot access the internet??

  93. Zane: Spyware doctor does not use proxy server or browser settings that are affected by malware. So in many cases it will update successfully.

  94. I got this bug from god knows where and have system restored to get rid of it for the time being. Seeing as its only a matter of time before it pops up again, I was wondering what could be done to prevent it? I have McAfee security software installed but judging on other’s comments it doesn’t detect or destroy the thing at all. Any advice or help would be very, very appreciated.

  95. @Maria Araya Leon
    i am sorry to say but you were scammed, Vista Internet Security 2010 is just a malware which acts like a quick fix if you pay but in reality all it does is get you to pay the fee and still acts like nothing happened.

  96. @Sandeep
    Hi Sandeep,I did what you suggested in #45.However I get “cannot import C:\..new.reg : Error accessing the registry” error message from the Registry Editor. How did you manage to get over this error. You had mestioned similar error in your #44. I saved exactly as you suggested.

  97. @Sandeep
    Sandip, I am able to apply the registry change you suggested. Two things I had to do. Save in Unicode format and clicking the .reg file in safe mode restart. It worked! thanks for your help

  98. Ok so I gave up on Spyware Doctor and decided to try and manually remove this virus from my PC but when I went to run and typed in command instead of opening anything it gave me an error message saying it could not find command and to be sure I typed it correctly. What is that all about??

  99. I cannot even open up command. When I open it up it opens up regular Notepad with an extremely long document of symbols…is that supposed to happen? What do I do?

  100. I some how got Vista security tools 2010 I tried the stupid dr but it just took him over in safe mode . I finally loaded Microsoft security esseentials on to a flash drive loaded that and it Murdered the Vista sec tools virus !!! Now I just need to get IE fixed ……I will NOT go into the files and change stuff that is a STUPID thing to suggest to an amature like me !

  101. THANK YOU!! I followed steps 1-6 in the instructions above to the “T”, and all seems fully repaired and operating fine. Thanks for the advice! When a step you described didn’t work right the first time, it was because I didn’t execute it properly. As soon as I fixed my mistake, everything went as planned. I did have to pay for the Spyware Dr., but I think it was a small price to pay for such a nasty virus and relatively easy to fix (at least no computer hospital visit!!). Keep up the good work.

  102. I have spydoctor and it is not detecting the “Vista Internet Security 2011 Virus”. I have even tried to manually remove, I am not having any luck. Any more suggestions? Yes, I am up to date on spydoctor.

  103. methid #1 worked for me!!! solved the vista internet security 2011

    my mozilla and internet explorer aren’t hijacked anymore

    THANK U ADMIN

Leave a Reply

Your email address will not be published. Required fields are marked *