Tuesday, March 16, 2010

Totally Unexpected Total Vista Security

Total Vista Security may show its nag screens totally unexpectedly for users. That is the way of introduction common for the family of counterfeits it belongs to, which is referred to as recent Windows Shield counterfeits thanking to the utilization of popular Windows logo in the form of shield in the nag screens of the family scamware (see the screenshot in this post, if interested) .
Remove Total Vista Security as another fake utility, even if it has been downloaded and installed in the way other than described above, namely on user’s own initiative based on online intrusive ads extolling Total Vista Security virtues. Click here to start Total Vista Security removal beginning with free scan and get rid of Total Vista Security adware and other infection as detected by the scanner.

Total Vista Security screenshot:

Total Vista Security removal tool:


Total Vista Security manual removal guide:
Delete Total Vista Security files:
av.exe
Delete Total Vista Security registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

No comments: