Total Vista Security. How to remove? (Uninstall guide)

removal by Lucia Danes - -   Also known as TotalVistaSecurity, Total VistaSecurity | Type: Rogue Antispyware
12

Total Vista Security is yet another rogue anti-spyware program from the same family as Vista Antispyware 2010 malware. It’s distributed through the use of Trojans just like all the other rogue programs out there. Trojans may come from fake online scanners, infected or malicious video sites. The scammers also distribute their bogus software on the biggest social networks such as Facebook or MySpace.

As a typical rogue program, Total Vista Security reports false system security threats and displays fake security alerts to scare you into thinking that your computer is infected with malicious software. Then it will ask you to pay for a full version of the program to remove the infections. The scan results are false and the reported infections don’t actually exist. Don’t pay for this bogus software and uninstall it form your computer upon detection.

Once running, Total Vista Security will also block legitimate and well known anti-virus and anti-spyware programs to protect itself from being removed. To make things worse, it will probably block task manager and registry editor as these tools are very helpful when removing Total Vista Security virus. You will have to complete several additional steps to make your PC work again. Please follow the removal instructions below to remove Total Vista Security infection from your computer completely.

Total Vista Security removal instructions:

1. Click Start->Run (or WinKey+R). Input: “command”. Press Enter or click OK.
2. Type “notepad” as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USERSoftwareClasses.exe]
[-HKEY_CURRENT_USERSoftwareClassessecfile]
[-HKEY_CLASSES_ROOTsecfile]
[-HKEY_CLASSES_ROOT.exeshellopencommand]

[HKEY_CLASSES_ROOTexefileshellopencommand]
@=””%1″ %*”

[HKEY_CLASSES_ROOT.exe]
@=”exefile”
“Content Type”=”application/x-msdownload”

4. Save file as “exefix.reg” (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files
5. Double-click to open exefix.reg. Click “Yes” for Registry Editor prompt window.
6. Download STOPzilla or an automatic removal tool below. Update STOPzilla and run a full system scan.

If you can’t complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install STOPzilla.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Total Vista Security you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Total Vista Security. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Total Vista Security manual removal:

Kill processes:
ave.exe

Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesInternet Exploreriexplore.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"

Delete files:
%AppData%ave.exe

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Guest

    thank you so much. this really helped… only problem is, i already paid for the damn vista security… hope i can block the charges on time. anyway, thanks again.

  • Guest

    Thanks Alot Mate …… I Hate Malware

  • Guest

    if you type in 1147-175591-6550 into the manual registration it will allow you to use internet again to download a malware removal tool

  • Abdillas

    I had a panic attack before all my browsers got blocked.. But I got suspicious since they really force you to pay.. Then, I found this.. Thank you so much …

  • Bill

    Who is writing and using this malware? Can we find the person responsible?

  • matt

    I was infected today. The process file for mine was vcm.exe. I had a copy of spybot that was not installed but I had the file in the computer. I had to go to safe mode to install it, or even to be able to do most anything. I think it took care of it.