Vista Internet Security 2010 manual removal:
Kill processes:
av.exe
Delete registry values:HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*
HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"
Delete files:%UserProfile%\AppData\Local\av.exe %UserProfile%\AppData\Local\WRblt8464P
Thanks again!
I mean on the other computer..
It says you can NOT go on the internet ..
Like at ALL.
God. I hate these kind of things!
So what shall I do?
Thanks
didn't need to do any registry stuff. got it from a windows update that had the virus coded in it...good luck folks.
and this process should be done from a logon with administrative privileges.
safe mode probably helps too, if you dont know how to access safe mode..
restart pc, after bios press F8 until you get the options.
~RaW
i had to do it like 10 times b4 it actually worked though.....
Start Menu-Programs-Accessories-System Tools-System restore!
I did it and it has deleted the crappy program!
I got irritated with that spyware and i tried with spyhunter it didn't work but it worked with your instructions. Thanks much.
to all who left HELPFUL comments
and to 2spyware.com!!
you have officially saved my life collectivley!!
STEPS 1through to 5 work perfectly with Malware bytes anti malware
thank you again
I have an ave.exe but no av.exe
DO I kill it?
Once you have access to your executables again, its merely a matter of running your fav. AV program or manually removing the infected files.
Thank you, btw.
Post Comment: