Home » News » Rogue Antispyware » Remove Antivirus Vista, Antivirus Vista Removal Guide

Remove Antivirus Vista, Antivirus Vista Removal Guide

By Gina on February 11, 2010 | Rogue Antispyware

Antivirus Vista is not a real security program. It is a fraudulent application pretending to be a legitimate system protection tool. The actual purpose of Antivirus Vista is to trick the user into purchasing its fake security software. In order to do so this malware imitates scanning user's computer for viruses and generates fake warning messages which suggest the user to buy Antivirus Vista to remove the threats that have been found.

Antivirus Vista is distributed online and usually downloaded and installed by trojans. This way the user is unaware of the process and therefore is not able to prevent it. If you want to be safe from Antivirus Vista and other similar parasites which not only seek to take your money, but are also a cause of a number of computer problems you should first of all obtain a reputable system security software. However, if you already have Antivirus Vista in your computer, please follow the instructions bellow in order to remove it.

New processes created

av.exe Learn how to remove malicious processes

New Antivirus Vista registry entries created

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
%UserProfile%\AppData\Local\av.exe
%UserProfile%\AppData\Local\WRblt8464P Learn how to unregister malicious DLL files

How to remove Antivirus Vista

To remove Antivirus Vista manually you must block rogue Antivirus Vista related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Antivirus Vista files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Remove MegaVaccine, MegaVaccine removal

Remove MegaVaccine, MegaVaccine removal

MegaVaccine is a rogue program which comes along with the download and installs itself automatically. With the aid of trojan infections, spam emails and various websites it tends to be affiliated one can easily fall victim to this dubious application. The trojan based software starts its fake activities as soon as it is installed on your computer. Read more.


News categories

Latest news