How to remove Vista Guardian
Tuesday, February 2nd, 2010 at 6:40 amHome » Rogue Antispyware » Vista Guardian
Vista Guardian description
Vista Guardian is a rougue anti-spyware, which can not be trusted. The parasite is fraudulent and displays warnings about infections. At your computers’ desktop this malware floods many security alerts and fake warnings once it is released. This unwanted parasite trying to show false scan results by making believe the user have to purchase a rogue Vista Guardian software.
As many other parasites Vista Guardian is not an exception this time. It also arrive on computer via Trojan that can change system settings and hijack an Internet browser to a fake security websites. Moreover, during installation Vista Guardian will make a copy of itself and will run instantly when you start an application. What is more, while the parasite is running, it may show you various alerts, such as:
Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.
However, this is all scam and you are fully safe to ignore it. Vista Guardian also has a property to hijack Internet Explorer and show false alerts when you open a website.
All in all, Vista Guardian is a scam and it is highly recommended do not trust this malware after it shows you fake scan results and all kind of false warnings. Do not purchase it, but use reputable anti-spyware and remove this parasite from you PC for good.
Vista Guardian is a Rogue Antispyware software
How to manually remove Vista Guardian
To remove Vista Guardian spyware you must block Vista Guardian sites, stop and remove processes, unregister DLL files, search and delete all other Vista Guardian files and registry utility. Follow the Vista Guardian detection and removal instructions below.
The most typical software removal method is to remove Vista Guardian by using "Add or Remove Programs" service. However there may be hidden Vista Guardian files, running processes and registries in your computer, so Vista Guardian may recreate all other files after reboot.
Vista Guardian manual removal instructions
Stop and remove Vista Guardian processes:
av.exe
Read more how to kill Vista Guardian processes
Locate and delete Vista Guardian registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
Read more how to delete Vista Guardian registry entries
Download RegistryBooster 2010 to scan errors caused by Vista Guardian
Detect and delete other Vista Guardian files:
%AppData%\av.exe
%AppData%\WRblt8464P
We strongly recommend you to use spyware remover to track Vista Guardian and automaticaly remove Vista Guardian processes, registries and files as well as other spyware threats.


February 14th, 2010 at 1:40 pm
I have vista guardian on my laptop and cannot access the internet at all please help me delete it.
Reply
Luciana Reply:
February 15th, 2010 at 1:37 am
Print the manual removal guidelines posted on this page. You can print those using some other computer. And then you can simply follow the tutorial step by step to delete the infection.
Reply
February 16th, 2010 at 9:46 am
Hi,
Thanks for the manual, I removed Vista guardian. But something went wrong… Think I deleted a wrong registry.
Every program or other files (music, photos) wont open anymore.
It sais; There is no program coupled to this application. Make a clutch via …..
The error was in dutch so I dont know the right translation.
Someone know how to fix this?
Reply
February 23rd, 2010 at 4:08 pm
I own a vista, and I can’t find the AppData section. Where do I look
Reply
bryan Reply:
February 24th, 2010 at 12:55 am
look in Users folder
also check ProgramData folder in Vista
Reply
February 24th, 2010 at 7:29 pm
This worked (thank god), but now nothing is opening. I can’t get into firefox or explorer because I don’t have ‘permission’, but if I type an address into wordpad and click it, I can get in. Any ideas?
Reply
Cody Reply:
March 6th, 2010 at 11:34 pm
try running as administrator
Reply
February 26th, 2010 at 6:49 pm
I had Vista Guardian on my computer, used to Spyware doctor to remove it. I think it was removed. (Not sure if it is dormant). But now I have another problem, every time when I try to open a program, it ALWAYS asks me which program i want to open it with, every time i open a new webpage the “open with” box comes up. Does anyone know how to fix this?
Thanks in advance
Reply
February 27th, 2010 at 6:10 am
I did a system restore and that worked for me! I noticed the windows firewall was off so hit the on button. Whew! Nasty malware. I screwed around for hours before another help website suggested the system restore.
Reply
March 6th, 2010 at 10:05 am
So i went through the regedit, and I believe i deleted the files and just want to double check with someone. I deleted \secfile\shell\open\command\Isolated Command, …\start\command\isolated command. And the \.exe\shell\open\command\isolated command, …..\start\command\isolated command…. Is there anything else i need to delete?
Reply
March 10th, 2010 at 4:18 pm
I downloaded, now i can only open internet explorer from the start button and cannot download anything. Help Me Please!!!
By the way I mean spywar doctor.
Reply