Home » News » Rogue Antispyware » How to Remove Antivirus Vista 2010, Antivirus Vista 2010 Removal Instructions

How to Remove Antivirus Vista 2010, Antivirus Vista 2010 Removal Instructions

By Bryan on January 29, 2010 | Rogue Antispyware

Antivirus Vista 2010 is a clone of Win 7 Antispyware 2010 and XP Internet Security 2010. Basically its the same malware only it chances its name depending on the Windows version that it infects. Antivirus Vista 2010 pretends to be a legitimate security tool and want's the user to purchase it. In order to convince them Antivirus Vista 2010 performs fake system scans and reports infections being found. It also loads fabricated warning messages that should scare the user and push them into buying Antivirus Vista 2010 which promises to clean their computer.

Antivirus Vista 2010 is distributed online at corrupt websites using trojans to download and install the parasite. The application is also capable of performing malicious actions such as hijacking the web browser, preventing real security programs from launching and violating computer's security. The best thing to do is to remove Antivirus Vista 2010 upon detection.

New processes created

av.exe Learn how to remove malicious processes

New Antivirus Vista 2010 registry entries created

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
%UserProfile%\AppData\Local\av.exe
%UserProfile%\AppData\Local\WRblt8464P Learn how to unregister malicious DLL files

How to remove Antivirus Vista 2010

To remove Antivirus Vista 2010 manually you must block rogue Antivirus Vista 2010 related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Antivirus Vista 2010 files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Delete Windows Safety Maintenance fraud

Delete Windows Safety Maintenance fraud

Windows Safety Maintenance is a rogue anti-spyware program which spreads via trojan. Once the trojan is released Windows Safety Maintenance stars fake scans and shows fraudulent results. It puts many efforts in trying to trick user into believing their PC is infected. Read more.


News categories

Latest news