Home Blog

How to Remove Vista Antivirus Plus 2013 completely from Your Computer

Posted by in Blog Rogue Program
on December 7th, 2012 | Leave a comment

Vista Antivirus Plus 2013 is just another malicious program like Win 7 Antivirus Plus 2013 that pretends to be able to remove virus and protect computer from attacks like a legitimate program, but the software is a fake one. It can not provide any protection to the computer and will damage the compromised computer severely. Usually, Vista Antivirus Plus 2013 is installed on the computer automatically when you click on a malicious link or when your computer has backdoor Trojans. The fake antivirus program displays security alerts and produce scaring scan result to urge victims to buy the registered version. If you are not a victim, you should be careful when surfing internet. It is necessary to develop a good online habit for every computer uses and don’t easily click those links or advertisements you don’t know. If you have been unfortunately infected by Vista Antivirus Plus 2013, the following suggestion about how to remove Vista Antivirus Plus 2013 may be useful for you.

Manual removal
Before you start, you should know that this method is not the first or best choice. It is just an option for those experienced pc users. It is proved that as long as you delete all components of Vista Antivirus Plus 2013 you could get rid of it successfully.

1. Press Alt + Ctrl + Del at the same time to run Task Manager. Kill processes
%CommonAppData%\[random]\[random].exe
%AppData%\Vista Antivirus Plus 2013\ScanDisk_.exe

2. Click Start – go to run – type in regedit and press enter to run Registry Editor. Delete entries

HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\AAS.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “IIL” = 0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “UID” = 8010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “runtime 13.00007″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “5″ = “avcenter.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “6″ = “avscan.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “7″ = “avgfrw.exe
HHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PoliciesHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “14″ = “avgcmgr.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “15″ = “avgwdsvc.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Vista Antivirus Plus 2013″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taumon.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wininitx.exe

3. Use windows search feature to find out related files. Delete malicious files

%CommonAppData%\[random]\[random].exe
%AppData%\Vista Antivirus Plus 2013\ScanDisk_.exe
%CommonAppData%\[random]\ASE.ico
%Desktop%\Vista Antivirus Plus 2013.lnk
%AppData%\Vista Antivirus Plus 2013\Instructions.ini
%StartMenu%\Vista Antivirus Plus 2013.lnk
%AppData%\Microsoft\Internet Explorer\Quick Launch\Vista Antivirus Plus 2013.lnk
%Programs%\Vista Antivirus Plus 2013.lnk

Automatic way
If you do not want to spend so much time and effort on manual removal way, you could use a virus removal program to complete the removal task automatically. Actually, automatic removal is the best choice for most users who do not know much about windows system. A virus removal program could delete Vista Antivirus Plus 2013 thoroughly without corrupting the system. When there are various pc threats on the internet, an antivirus program has become a necessity for our computer. When your antivirus program could not remove Vista Antivirus Plus 2013 effectively, it is necessary to install an advanced security program like Spyware Cease. 3 Steps could help you get rid of the malware and other hidden viruses.

  1. Run Spyware Cease to scan your computer
  2. Select all items when the scan completes
  3. Click remove button to get rid of detected threats

Leave a Reply