• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove Total Vista Security, Vista Security Tool 2010

Myantispyware team March 16, 2010    

Total Vista Security also known as Vista Security Tool 2010 is a rogue antispyware program, clone of widely spread Vista Antispyware 2010. As before, the design of the program looks like an antispyware application, but in reality, it can not remove viruses, trojans, etc., nor will be protect your computer from legitimate future infections. Total Vista Security created with one purpose to trick you into purchasing the full version of the software.

Total Vista Security (Vista Security Tool 2010) uses trojans to infiltrate your computer. When this trojan is started, for some time he himself does not manifest, thus hiding the web site with which he entered on the computer. A few minutes later, it will secretly download and install the rogue onto your computer without any request or permission.

During installation, Total Vista Security (Vista Security Tool 2010) will register itself in the Windows registry to run automatically every time when you start an application (files with “exe” extension). The rogue also uses this method of running to block the ability to run any programs, including security applications.

Once installed, Total Vista Security starts scanning procedure, which results in finding the set of trojans, viruses and other malicious programs. All of these infections are fake, so you can safely ignore them. What is more, while the rogue is running, it will display fake security alerts and notifications with “Spyware infection has been found” or “Tracking software found” header. Obviously, such results are a fraud, Total Vista Security want to force you to believe that your computer is infected. Last but not least, the rogue will also hijack Internet Explorer and Firefox and display fake warnings when you opening a web site.

As stated above, Total Vista Security (Vista Security Tool 2010) is scam, which designed with one purpose to scare you into thinking that your computer in danger as a method to trick you into purchasing the full version of the program. If your computer is infected with this malware, then most importantly, do not purchase it! Uninstall the rogue from your PC as soon as possible. Use the removal guide below to remove Total Vista Security from your computer for free.

Use the following instructions to remove Total Vista Security (Vista Security Tool 2010)

Step 1. Repair “running of .exe files”.

Method 1

Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

Once finished, please checkup the text twice. You will see window similar to the one below.


Total Vista Security – Repair “running of .exe files”

Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.) Double Click fix.reg and click YES for confirm. Reboot your computer.

Method 2

Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.

[Version]
Signature=”$Chicago$”
Provider=Myantispyware.com

[DefaultInstall]
DelReg=regsec
AddReg=regsec1

[regsec]
HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command

[regsec1]
HKCR, exefile\shell\open\command,,,”””%1″” %*”
HKCR, .exe,,,”exefile”
HKCR, .exe,”Content Type”,,”application/x-msdownload”

Save this as fix.inf to your Desktop (remember to select Save as file type: All files in Notepad.)
Right click to fix.inf and select Install. Reboot your computer.

Step 2. Remove Total Vista Security (Vista Security Tool 2010) associated malware.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Total Vista Security infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

mbam
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start Total Vista Security (Vista Security Tool 2010) removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Total Vista Security (Vista Security Tool 2010) creates the following files and folders

%AppData%\ave.exe

Total Vista Security (Vista Security Tool 2010) creates the following registry keys and values

HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”

Malware removal Rogue Anti Spyware

 Previous Post

How to remove Antivirus 7 or Antivirus7 (Uninstall instructions)

Next Post 

How to remove XP Security Tool 2010

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

112 Comments

  1. Patrik
    ― April 22, 2010 - 8:58 am  Reply

    Connor, you need run Notepad through Command console. To run command console, CLick Start, Run. Type “command” w/o quotes and press Enter. Command console = black window opens, type notepad and press Enter.

  2. karen
    ― April 22, 2010 - 9:52 pm  Reply

    hi sorry to ask such a stupid question but when i click start it dosent give me the run option how do i get to it.

  3. Connor
    ― April 23, 2010 - 4:05 am  Reply

    Ok, I managed to get notepad open and did step 1 again, but I still can’t open the MBAM setup, it just brings up the command console every time I click it. I’ve tried to change the default program for .exe files, but I couldn’t. What do I do now?

  4. Patrik
    ― April 23, 2010 - 11:04 am  Reply

    karen, if you using Vista with classic theme, then you need click Start, and type “command” w/o quotes in Search field.

  5. Patrik
    ― April 23, 2010 - 11:09 am  Reply

    Connor, try method 2, once completed, don`t reboot your PC, go to step 2 (run Malwarebytes).

  6. Vicky
    ― April 24, 2010 - 3:19 am  Reply

    I performed the steps above and it seemed to work in removing the problem. But the MalwareBytes scan I performed only found 3 infected files, which seems really different from the above image which looks like it has 20 or so infected files. So I was just wondering if this is normal or if some of the virus may be hidden somewhere. I didn’t see anything about the registry keys or files that are listed above. A second MalwareBytes scan found nothing else. Does this mean that I really got rid of Vista Security, or could it still be lingering around?

  7. Patrik
    ― April 24, 2010 - 7:54 am  Reply

    Vicky, try update Malwarebytes and perform a fresh scan. If result – zero, then you`re clean.

  8. jenny
    ― April 25, 2010 - 7:05 am  Reply

    heya, how long is the scan supposed to last, mine has taken 56 mins so far, is that too long??

  9. jenny
    ― April 25, 2010 - 7:52 am  Reply

    and now its almost 2 hours?!?

  10. uman
    ― April 25, 2010 - 7:18 pm  Reply

    Gr8..it worked for me…million thanks

  11. Emma
    ― April 27, 2010 - 11:51 am  Reply

    Hi
    when I type command, Security tool is preventing the black dialogue box from opening, so I cannot even get to notepad.
    what can I do?

  12. Tom
    ― April 27, 2010 - 12:15 pm  Reply

    Hi Patrik,

    I followed step 1 and step 2. Malwarebytes found and deleted Security Tool. I’ve run several other antivirus/spy/malware tools and there’s no sign on the virus, however, i still cant access Firefox or Internet Explorer (or Skype for that matter).

    The programs load but Firefox says “Problem loading page – server not found” and IE says “Internet Explorer cannot display the webpage”

    Help would be greatly appreciated. Im running Vista.

  13. matt
    ― April 27, 2010 - 4:21 pm  Reply

    Hey thank you so much for helping me but I did this and my computer doesnt have that stupid total vista thing anymore but Now I cant open and programs. I try to open my itunes and it says “windos cannot open this file”. Please help Im almost there

  14. John
    ― April 27, 2010 - 10:35 pm  Reply

    I did step 1 and 2, just like you said to barbara. I think that “Total Vista Security”is gone, but I cannot open the internet.

  15. Patrik
    ― April 28, 2010 - 1:27 am  Reply

    Emma, you have typed “command” w/o quotes ?

  16. Patrik
    ― April 28, 2010 - 1:29 am  Reply

    Tom, looks like Firefox proxy setting are hijacked. Run Firefox, open Network settings, then proxy settings and select No proxy option.

  17. Patrik
    ― April 28, 2010 - 1:58 am  Reply

    Matt, try repeat the first step above.

  18. Patrik
    ― April 28, 2010 - 2:10 am  Reply

    John, the following:
    Click Start, Run, type regedit and press Enter.
    Registry editor opens.
    Navigate in the left panel to HKEY_LOCAL_MACHINE \ SOFTWARE \ Clients \ StartMenuInternet \ IEXPLORE.EXE \ shell \ open \ command

    I the right part of window click twice to “@”. You will see a screen with the contents like below: “C:\Documents and Settings\user\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
    Remove left part, leave only “C:\Program Files\Internet Explorer\iexplore.exe”.

    Reboot your PC and try run Internet Explorer once again.

  19. Simon
    ― April 28, 2010 - 11:51 am  Reply

    I followed step 1, but when it came to installing Malwarebytes I can download it, but every time I open the file it does nothing. I’ve tried downloading it from lots of different places all over the internet to no avail – could Total Vista Security be blocking it’s installation? If so, could I use another free malware remover? Windows Defender won’t install as it’s already installed but when I open it I get taken straight to Total Vista Security! Argh!
    Thanks so much in advance for any help you can lend!

  20. John
    ― April 28, 2010 - 12:34 pm  Reply

    I don’t get this Part”I the right part of window click twice to “@”. ” but I do the others, hope you will helpp me

  21. Patrik
    ― April 29, 2010 - 1:33 am  Reply

    Simon, probably your PC also infected with TDSS trojan. Follow the instructions.

  22. donj
    ― April 29, 2010 - 3:45 am  Reply

    cheers mate, method 1 worked a treat!

  23. Jane
    ― April 29, 2010 - 2:03 pm  Reply

    Did method 2, quick, easy and WORKED!

    Thank you so so so much.

  24. beth
    ― April 30, 2010 - 10:57 pm  Reply

    Hi, when I go to start and run then type command I get an error ” Windows can not find command…” What am I doing wrong? Thanks so much!

  25. Patrik
    ― April 30, 2010 - 11:48 pm  Reply

    beth, follow the steps above.
    Open C:\Windows\System32 folder and copy notepad to your desktop.
    Open My Computer folder.Select the Tools menu and click Folder Options.Select the View tab.Uncheck the Hide file extensions for known types option. Click Yes to confirm. Click OK.
    Right click to notepad.exe in your desktop, and select rename. Type notepad.com and press Enter. Run this file. Notepad opens. Then follow the steps above.

  26. beth
    ― May 2, 2010 - 9:33 pm  Reply

    Thanks! Giving it a try now.

  27. Patrick
    ― May 4, 2010 - 4:38 am  Reply

    Hi Patrik, I sucessfully removed the sypware using the procedure. Thanks. However, I can not log in to my softphone (X lite) everytime I start. Can you kindly advise what the problem is? Appreciate the help.

  28. Patrik
    ― May 5, 2010 - 4:33 am  Reply

    You have tried reinstall the program ?

  29. Patrick
    ― May 5, 2010 - 5:17 am  Reply

    Hi Patrik, yes I reinstalled it again. however I am getting the same error… I am unable to use the softphone now… can you help me… please.

  30. Patrik
    ― May 5, 2010 - 5:30 am  Reply

    can not log in to my softphone

    What computer shows when you trying login ?

« Previous 1 2 3 4 Next »

Leave a Reply to Patrik (Myantispyware admin) Cancel reply

New Guides

STDEI GLP 1 Review, Stdei GLP-1 Weight Loss Oral Solution Scam
scam alert
GOTEEX.com Review: Promo Code Scams Exposed
Olygee Cooling Ace Review, Don’t Be Fooled by False Promises and Misleading Ads
Suzuki Moorai Robot Dog Vehicle Real or a Scam, What You Need to Know
Liketonline Cooling Ace Review, Scam or Legit? What You Need to Know

Follow Us

Search

Useful Guides

Malwarebytes won’t install, run or update – How to fix it
How to reset Google Chrome settings to default
ads by adware
How to remove Adware from Windows 10 (Virus removal guide)
Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide
remove chrome extension
How to remove Chrome extensions installed by enterprise policy

Recent Guides

How to remove Antivirus 7 or Antivirus7 (Uninstall instructions)
How to remove Smart Security or SmartSecurity
How to remove CleanUp Antivirus (Uninstall instructions)
How to remove avcommand.net (Browser hijacker)
How to remove Dr. Guard (Uninstall instructions)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.