Free malware removal tool to remove Vista Guardian 2010

Written by Administrator | Monday, 01 February 2010 18:48

Vista Guardian 2010 is a rogue antispyware that may reprensent security risk for your system, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Vista Guardian 2010. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Vista Guardian 2010 immediately from your system.

Vista Guardian 2010

To remove Vista Guardian 2010 (Uninstall Vista Guardian 2010)

Download this free removal tool for Vista Guardian 2010
Extract it
Launch
Click on the delete button

Vista Guardian 2010 will be removed from your system in 10s. Restart your computer when it’s finished.

This removal tool for Vista Guardian 2010 works also for

Antivirus XP 2010
Antivirus Vista 2010
Antivirus Win 7 2010
XP Antivirus Pro
XP AntiSpyware 2010
XP Internet Security
XP Internet Security 2010
XP Guardian
Vista Antispyware 2010
Vista Guardian
Vista Antivirus Pro
Vista Internet Security
Vista Internet Security 2010
Win 7 Antivirus Pro
Win 7 Antispyware 2010
Win 7 Internet Security
Win 7 Internet Security 2010
Win 7 Guardian

Processes :

av.exe

Files :

%AppData%\av.exe
%AppData%\[random]
%Temp%\[random].dll

Registry

Registry keys created

HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command

Registry values created

HKEY_CURRENT_USER\Software\Microsoft\Windows
- Identity = 0x5B2C8CF8
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
- (Default) = ""%AppData%\av.exe" /START "%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
- (Default) = ""%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
- (Default) = ""%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
- (Default) = "%1"
HKEY_CURRENT_USER\Software\Classes\.exe
- (Default) = "secfile"
- Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
- (Default) = ""%AppData%\av.exe" /START "%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
- (Default) = ""%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
- (Default) = ""%1" %*"
- IsolatedCommand = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
- (Default) = "%1"
HKEY_CURRENT_USER\Software\Classes\secfile
- (Default) = "Application"
- Content Type = "application/x-msdownload"

Registry values changed

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
- (Default) =
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- AntiVirusOverride =
- FirewallOverride =

Comments

+2 #13 2010-03-23 22:19

Thanks also. Great tool. Nuked the beast in seconds.

Quote

+2 #12 2010-03-15 11:48

OMG that worked!!!took all of 2mins i have spent ages trying to get rid of this bloody thing i used malware anti malware, spywear terminator,mcaf ee and others which took ages scanning and downloading!!i hav to say i didnt think it would it sounded to good to be true but it did lol.sorry just in shock.all i can say is THANK YOU THANK YOU!!!totally amazed!!!

Quote

+1 #11 2010-03-14 05:16

It's people who develop things like XP Guardian that make me hate humanity, but it's people like you (who develop awesome products like this) who make me love it. THANK YOU SO MUCH.

Quote

+1 #10 2010-03-10 10:01

U GUYS............

YOU GUYS ARE FUKIN GENIUS'S........... IM GONNA PASTE THIS EVERYWHERE. THANX!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !1