Total Vista Security also known as Vista Security Tool 2010 is a rogue antispyware program, clone of widely spread Vista Antispyware 2010. As before, the design of the program looks like an antispyware application, but in reality, it can not remove viruses, trojans, etc., nor will be protect your computer from legitimate future infections. Total Vista Security created with one purpose to trick you into purchasing the full version of the software.
Total Vista Security (Vista Security Tool 2010) uses trojans to infiltrate your computer. When this trojan is started, for some time he himself does not manifest, thus hiding the web site with which he entered on the computer. A few minutes later, it will secretly download and install the rogue onto your computer without any request or permission.
During installation, Total Vista Security (Vista Security Tool 2010) will register itself in the Windows registry to run automatically every time when you start an application (files with “exe” extension). The rogue also uses this method of running to block the ability to run any programs, including security applications.
Once installed, Total Vista Security starts scanning procedure, which results in finding the set of trojans, viruses and other malicious programs. All of these infections are fake, so you can safely ignore them. What is more, while the rogue is running, it will display fake security alerts and notifications with “Spyware infection has been found” or “Tracking software found” header. Obviously, such results are a fraud, Total Vista Security want to force you to believe that your computer is infected. Last but not least, the rogue will also hijack Internet Explorer and Firefox and display fake warnings when you opening a web site.
As stated above, Total Vista Security (Vista Security Tool 2010) is scam, which designed with one purpose to scare you into thinking that your computer in danger as a method to trick you into purchasing the full version of the program. If your computer is infected with this malware, then most importantly, do not purchase it! Uninstall the rogue from your PC as soon as possible. Use the removal guide below to remove Total Vista Security from your computer for free.
Use the following instructions to remove Total Vista Security (Vista Security Tool 2010)
Step 1. Repair “running of .exe files”.
Method 1
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
Once finished, please checkup the text twice. You will see window similar to the one below.
Total Vista Security – Repair “running of .exe files”
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.) Double Click fix.reg and click YES for confirm. Reboot your computer.
Method 2
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
[Version]
Signature=”$Chicago$”
Provider=Myantispyware.com
[DefaultInstall]
DelReg=regsec
AddReg=regsec1
[regsec]
HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command
[regsec1]
HKCR, exefile\shell\open\command,,,”””%1″” %*”
HKCR, .exe,,,”exefile”
HKCR, .exe,”Content Type”,,”application/x-msdownload”
Save this as fix.inf to your Desktop (remember to select Save as file type: All files in Notepad.)
Right click to fix.inf and select Install. Reboot your computer.
Step 2. Remove Total Vista Security (Vista Security Tool 2010) associated malware.
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select Perform Quick Scan, then click Scan, it will start scanning your computer for Total Vista Security infection. This procedure can take some time, so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure that everything is checked, and click Remove Selected for start Total Vista Security (Vista Security Tool 2010) removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Total Vista Security (Vista Security Tool 2010) creates the following files and folders
%AppData%\ave.exe
Total Vista Security (Vista Security Tool 2010) creates the following registry keys and values
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
Hi Patrik, the x lite soft phone reads – registration error : 408… Have we changed any firewall setting from the above procedure or does the spyware still causing the problem??
Other network applications, including Internet Explorer, Firefox, etc, works fine ?
Hi Patrik, everything is ok (all working) except with the x lite softphone… I really dont know how to get this back working again… I re-installed it again but same error.. there is something blocking my registration and I cant use it..
Patrick, please start a new topic in our Spyware removal forum. I will check your PC. Probably your PC is infected with a hidden trojan.
The fastest way to remove the security tool virus was to log off and sign in as another user. I was able to download a trial copy of SpyHunter and did a scan that showed 174 infections. I then just clicked on Fix It and rebooted and I was totally clean again.
Thank you so very much for this! Everywhere else I looked to get help with this evil evil thing, they wanted me to download and buy software to remove it, or get on a different computer which I couldn’t do. I have many problems with this, it got to the point that I could open regedit and it wouldn’t open command unless I told it to open as admin. But I finally got it open, used method one and now I don’t have anymore pop ups telling me that it couldn’t even open IE. THANK YOU SO MUCH!
Yay! Method 1 worked for me! I had to get on this site on my phone and type in the registry piece by piece since I couldn’t copy/paste. But Vista Total Security is gone! Thank you so much! My computer geek husband is deployed right now, lol!
@Bil
@Patrik
It also affected my internet. Since I performed the steps I can’t connect to internet anymore.
Patrik, I agree with many other on here, my computer is now FAR worse than before as I cannot open ANY .exe files. I suggest you come up with a solution other than ‘try step 1 and 2’ as I have tried both steps and they do not work. WARNING TO OTHERS. IGNORE PEOPLE THAT SAY THIS WORKS AS IT DOES NOT!!!!!!!!!!!
Thank you very much!
My laptop was infected out of nowhere and I did not remember installing any “Total Vista Security”. So I decided to go on my desktop to check out whats up. As soon as I searched up what it was and how to remove it, it directed me to this site. Once I read over the comments I decided to trust this site. As soon as I tried Method 1 and rebooted, voila! Total Vista Security did not show up after opening up my internet browser. I’m happy to find there are people who would go out of their way to help people in trouble. Thanks!
Leah, your Windows registry is still broken. You need to repeat the first step to fix your trouble. Try also disable UAC control before start it. Click Start, Control Panel, User accounting, Click “Turn User Account Control on or off”. Uncheck “Use User Account Control (UAC)” and click OK. Now try install fix.reg(inf) once again.
Patrick please help! I have done what you said in step 1 method 2, and it got rid of the virus I think, but now i can’t open any .exe files! I looked at your comments and you said to ppl try method 1 step 1 so I did that. Nothing has changed though and I still cannot access .exe files. How can I undo what I did in Step 1 method 2?
I tried over and over again and it has finally worked! You are a star thank you for being so helpful patrick you’re absolutely fabulous!!!
Did the fix.reg of method 1 which worked. I did it on a different computer and then copied the file from a flash drive to the desktop in question. Have malwarebytes already and ran it – found three trojan files. By the way could not get malwarebytes to work until I did the fix.reg and rebooted.
Same here — couldn’t run any .exe files. Method 1 worked beautifully. Thanks, Patrik.
I followed step 2 with the fix.inf file and it seems to have worked. Accessing programs through “run as administrator” helped navigate around the blocks. Thanks for the help buddy.
I ran this, and it seemed to remove Vista Total Security, so thank you for that. However, now I get a Windows Script Host pop up every few minutes that says “There is no file extension in C:\Windows\system32\180000”. How do I correct this?
Kim, probably your computer is still infected with a hidden trojan/malware. To remove this malware, ask for help in our Spyware removal forum.
Leah, have faith ! I had exactly the same problem you described, but I followed Patriks instruction to repeat the first step and presto ! I’m back in action. Thx for your help Patrick
I’ve tried 1 &2 many times over but every time I try to open something or double click fix.reg nothing happens for a bit and then a box pops up that says ‘The dependency service or group failed to start’. I can’t seem to get anywhere in this and am getting frustrated. Please help!
*EDIT* I got frustrated with the ‘failing to start’ bit so i rebooted and tried to double click the fix.reg before Vista total security had a chance to fully start up. It worked! Apparently I just had to race it there before it could stop me. So far method 1 seems to have worked 😀 Thank you soo much for having such mad skill and for making it available to us online!
Hey thank you for this, it seemed to do the trick. Now I have a few silly question as I am a total noob when it comes to this kind of stuff: can i safely delete the fix file from my desktop, and can i uninstall the antimalware?
another problem, i think it might be connected, since i got the virus i wasnt been able to use mozilla firefox (deafault browwser) ive been running on internet explorer, i click on the icon and it wont switch on. does that mean that i still have the virus, or is it just a problem with firefox?