HomeDownloadAboutDonationForum 
Malware removal instructions
Trojan.csrssc
Trojan.winlogin
Trojan.ayacas
Trojan.srenum.sys
Trojan.COMServer
Trojan.pogewaso.dll
Trojan.surfguard
Trojan.safesurf
Rogue.AWM Antivirus
Trojan.Rfu.exe
googletoolbaruser_32.exe
Rogue.AVDefender2011
Trojan.net.net
Rootkit.xprot
Trojan.winlog
Trojan.updpxe32.exe
Hijacker.thewebsiteblock
Trojan.siszyd32
Trojan.shk_v10
Trojan.sdra64
Rootkit.pragmad.sys
Rootkit.ntndis.sys
Rootkit.new_drv
Trojan.navihelper
Trojan.ipsecndis
Adware.ezLife
Trojan.d3dramp32
Trojan.conhost
Rogue.AdvancedSecurityTool
Rogue.asectool

This guide contains three parts

Part 1: Symptom of Vista Smart Security 2010

Part 2: Manual and automatical removal guide

Part 3: Solution of infection by a new variant

Symptom of Vista Smart Security 2010

Vista Smart Security 2010 is a rogue antispyware program. It belongs to a rogue program family, all variants of this rogue program family is listed below: they use the same method to infect your computer.

  • Total XP Security 2010
  • XP Internet Security 2010
  • XP Smart Security 2010
  • XP Antimalware 2010
  • Antivirus 2010
  • Total Vista Security 2010
  • Vista Antispyware 2010
  • Vista Antimalware 2010
  • Vista Smart Security 2010
  • Total Win7 Security 2010
  • Win7 Antimalware 2010
  • Win7 Smart Security 2010

Once infected by one of above variant, a process (ave.exe)will appear in task manager:

'ave.exe' process in task manager

This "ave.exe" file is located in "Application Data" folder, the "Application Data" folder is :
For Windows XP : C:\Documents and Settings\%User Name%\Local Settings\Application Data
For Windows Vista/7 : C:\Users\%User Name%\AppData\Local
Note : %User Name% is the name you login.

This malware will modify several registry entries to configure the "ave.exe" to be running whenever an exe file ( a file with "exe" extension ) is run. The modified registry entries look like :

'Start Menu Internet' registry entry modified 'secfile' registry entry modified '.exe' registry entry modified

NOTE: If you just delete the "ave.exe" file without restoring the modified registry entries, you will not be able to run any exe file.

How to remove Vista Smart Security 2010 rogue program


Manual removal instructions

Step 1. Repairing damaged registry entries.

Copy all the text below in bold into a notepad:


Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

Step 2. Save this file as fix.reg on your desktop (remember to choose "Save as" and file type:All when saving it in notepad.)

Step 3. Double click on the fix.reg, then click 'Yes' to emerge it to registry.

Step 4. Launch TaskManager and terminate the process "ave.exe"

Step 5. Find the "ave.exe" file in this location and delete it :

For Windows XP : C:\Documents and Settings\%User Name%\Local Settings\Application Data

For Windows Vista/7 : C:\Users\%User Name%\AppData\Local


Automatical Removal instructions

Several antispyware programs can completely remove this malware:

MalwareBytes:
MalwareBytes is an excellent antispyware program, The company of MalwareBytes provides a free version for personal user.
Download and install MalwareBytes Anti-malware (MBAM).

Main interface of MalwareBytes' Anti-Malware

Screenshot of MalwareBytes' Anti-Malware


AVG Antivirus:
AVG Antivirus is another well-known antivirus protection tool. The AVG Free Edition is available free of charge to home users for the life of the product.

Download and install AVG Free Edition

Main interface of AVG

Screenshot of AVG

Solution for infection by a new variant

If you followed the steps above but still get this malware or some objects are denied to delete, your computer possibly gets infected by a new variant or there is some hidden objects that have not been detected. We provide a free diagnostic scan tool ("TheStubware") to scan your computer and generate a scan log file for analysis. This tool is especially used to find those stubborn malware. You can submit your log file to support@TheStubware.com, we will analyze it and send you back a removal script file to remove the new variant or hidden objects found in your log file.

Download and install TheStubware

Leave your comment (Currently 0 comments)

Your Name :
Your Email : Your email will not be exposed to others.
Your comment :
Do you remove this:

Copyright © 2009 - TheStubware.com All rights reserved