How to remove Vista Guardian

Tuesday, February 2nd, 2010 at 6:40 am
Home » Rogue Antispyware » Vista Guardian

Vista Guardian description

Vista Guardian is a rougue anti-spyware, which can not be trusted. The parasite is fraudulent and displays warnings about infections. At your computers’ desktop this malware floods many security alerts and fake warnings once it is released. This unwanted parasite trying to show false scan results by making believe the user have to purchase a rogue Vista Guardian software.

As many other parasites Vista Guardian is not an exception this time. It also arrive on computer via Trojan that can change system settings and hijack an Internet browser to a fake security websites. Moreover, during installation Vista Guardian will make a copy of itself and will run instantly when you  start an application. What is more, while the parasite is running, it may show you various alerts, such as:

Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.

However, this is all scam and you are fully safe to ignore it. Vista Guardian also has a property to hijack Internet Explorer and show false alerts when you open a website.

All in all, Vista Guardian is a scam and it is highly recommended do not trust this malware after it shows you fake scan results and all kind of false warnings. Do not purchase it, but use reputable anti-spyware and remove this parasite from you PC for good.

Vista Guardian is a Rogue Antispyware software

How to manually remove Vista Guardian

To remove Vista Guardian spyware you must block Vista Guardian sites, stop and remove processes, unregister DLL files, search and delete all other Vista Guardian files and registry utility. Follow the Vista Guardian detection and removal instructions below.

The most typical software removal method is to remove Vista Guardian by using "Add or Remove Programs" service. However there may be hidden Vista Guardian files, running processes and registries in your computer, so Vista Guardian may recreate all other files after reboot.

Vista Guardian manual removal instructions

Stop and remove Vista Guardian processes:
av.exe Read more how to kill Vista Guardian processes

Locate and delete Vista Guardian registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
Read more how to delete Vista Guardian registry entries
Download RegistryBooster 2010 to scan errors caused by Vista Guardian

Detect and delete other Vista Guardian files:
%AppData%\av.exe
%AppData%\WRblt8464P

We strongly recommend you to use spyware remover to track Vista Guardian and automaticaly remove Vista Guardian processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

12 Responses to

Vista Guardian

  1. Emma

    I have vista guardian on my laptop and cannot access the internet at all please help me delete it.

    Reply

    Luciana Reply:

    Print the manual removal guidelines posted on this page. You can print those using some other computer. And then you can simply follow the tutorial step by step to delete the infection.

    Reply

  2. Maarte

    Hi,

    Thanks for the manual, I removed Vista guardian. But something went wrong… Think I deleted a wrong registry.

    Every program or other files (music, photos) wont open anymore.

    It sais; There is no program coupled to this application. Make a clutch via …..

    The error was in dutch so I dont know the right translation.

    Someone know how to fix this?

    Reply

  3. Brett

    I own a vista, and I can’t find the AppData section. Where do I look

    Reply

    bryan Reply:

    look in Users folder
    also check ProgramData folder in Vista

    Reply

  4. Brianne

    This worked (thank god), but now nothing is opening. I can’t get into firefox or explorer because I don’t have ‘permission’, but if I type an address into wordpad and click it, I can get in. Any ideas?

    Reply

    Cody Reply:

    try running as administrator

    Reply

  5. Nova

    I had Vista Guardian on my computer, used to Spyware doctor to remove it. I think it was removed. (Not sure if it is dormant). But now I have another problem, every time when I try to open a program, it ALWAYS asks me which program i want to open it with, every time i open a new webpage the “open with” box comes up. Does anyone know how to fix this?

    Thanks in advance

    Reply

  6. jim

    I did a system restore and that worked for me! I noticed the windows firewall was off so hit the on button. Whew! Nasty malware. I screwed around for hours before another help website suggested the system restore.

    Reply

  7. David

    So i went through the regedit, and I believe i deleted the files and just want to double check with someone. I deleted \secfile\shell\open\command\Isolated Command, …\start\command\isolated command. And the \.exe\shell\open\command\isolated command, …..\start\command\isolated command…. Is there anything else i need to delete?

    Reply

  8. Seth

    I downloaded, now i can only open internet explorer from the start button and cannot download anything. Help Me Please!!!

    By the way I mean spywar doctor.

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here