VistaAntivirus Pro 2010

March 9th, 2010
Home » Rogue Antispyware » VistaAntivirus Pro 2010

VistaAntivirus Pro 2010 description

VistaAntivirus Pro 2010 is a fraudulent anti-spyware program which usually spreads via trojan. Once you start your computer it installs automatically. This fake security tool acts like a real one, but it is not so. Even if it states your system is infected, do not believe it.

As a trick this bogus system uses its fake scan results. It shows you numerous warnings and pop-ups claiming you have to buy “full” version of VistaAntivirus Pro 2010 and clean your computer from infections. It is also mentioned, this malware is a clone of XP Internet Security and Win 7 Internet Security 2010 malicious programs. All in all, do not fall for the blatant scam and remove this parasite as soon as possible.

Manual VistaAntivirus Pro 2010 Removal


VistaAntivirus Pro 2010 processes:

av.exe
Help: A Guideline of Killing Malicious Processes


VistaAntivirus Pro 2010 registry values:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "av.exe" /START "firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "av.exe" /START "firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "av.exe" /START "iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Help: How to edit windows registry entries


Other malicious VistaAntivirus Pro 2010 files:

%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P

The manual removal of files and registries should be performed by experienced users. A system can be badly affected if any error is done during the manual removal. We recommend using automatic removal tools to delete VistaAntivirus Pro 2010, if you are not familiar with deleting malware manually.

Leave a Reply