Windows Vista Blog

Vista Guardian 2010 is a fake anti-spyware program that is related to well-known rogue programs such as Vista Antispyware 2010 and Win 7 Antispyware 2010. It is an Operating-System specific application that changes its name and appearance according to the OS it is installed on. Vista Guardian 2010 reaches user systems via Trojans that get into the system along with other malware. It is also heavily advertised online, and can be installed manually by users who are tricked by online scammers and advertisers. Once installed, Vista Guardian 2010 will perform numerous fake scans of the computer and give false threat reports that state that the user’s system is at a serious risk from viruses. It also generates endless pop-ups from the Windows taskbar claiming to have found one virus or the other. Vista Guardian 2010 then urges the user to purchase a copy of the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is inadequate to clean the user’s system. It is important to remember that Vista Guardian 2010 is a rogue program and that it cannot scan or clean your system in any way.

The process needed for Vista Guardian 2010 removal is detailed below.

File Removal Procedures

The first step in Vista Guardian 2010 removal is to stop the following process:

av.exe

Next, it is necessary to remove the following files and folders:

%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P

Once these steps have been completed, your hard disk no longer contains any instances of Vista Guardian 2010. However, in order to make sure that no other malicious software related files are left behind as a result of the manual removal procedures, it is recommended to scan the entire system using a genuine antivirus software such as Spyware Doctor with Antivirus.

Registry Removal Procedures

After file removal has been completed, the following keys and settings should be removed from the Windows registry:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

Once this step has been completed, Vista Guardian 2010 removal is complete. Even if this is true, caution should be manifested in order to avoid further similar infections.

Conclusion

Manual Vista Guardian 2010 removal is recommended only for experienced users of computer systems, as any mistake made by an inexperienced user could cause damage to the system. Inexperienced users are advised to use a web-based repair service such as www.onlinecomputerrepair.org that offers consultancy for Vista Guardian 2010 removal.