How to remove Vista Internet Security 2012

What is Vista Internet Security 2012?

Vista Internet Security 2012 is dangerous and soon you will know why you must remove it: it’s a rogue anti-spyware that will try to rip you off. Known to be spread by Trojans, this malware will disable your anti-spyware in order to protect itself from removal. Additionally, it will report about numerous ‘viruses’ that have been detected on your machine and then will offer its removal services. Please, never believe these messages displayed by Vista Internet Security 2012 out of nowhere! It’s very important to get rid of it ASAP because lately it will allow more viruses into your PC.

Vista Internet Security 2012 is not a typical rogue – suing this name, it infects only those computers that have Windows Vista OS running. However, you can also find it named XP Internet Security 2012 or Win 7 Internet Security 2012. Malware starts its activity with secret modification of the registry. This helps the scamware to start as soon as PC is rebooted and then display its trustworthy looking alerts and scanners. Additionally, Vista Internet Security 2012 offers its license which is paid and useless at the same time. Once the Registry gets modified, the program will warn you about viruses detected in such form of pop up ads:

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

XP Internet Security 2012 Alert
Security Hole Detected!
A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?

These phony warnings, telling the user that his PC is not safe, report invented viruses only, so keep in mind that you must simply ignore them. If removed, they may lead your computer into complete damage because some of these files are important for a normal computer’s functionality. Additionally, Vista Internet Security 2012 may let more viruses inside your computer and also start tracking your online activity. It’s dangerous, so please try to remove Vista Internet Security 2012 ASAP. You should follow the guide written below:

Special removal instructions for Vista Internet Security 2012

1. You can use these keys to disable majority of popups: 1147-175591-6550 or 2233-298080-3424 or 3425-814615-3990. Enter it in its manual registration section. This will not fully remove the Vista Internet Security 2012, so continue to next steps.

1.a. You can try to change system date to 7 days in the future (doubleclick on the date in status bar). Reboot PC, then change date back. If this works, continue to step 3.

2. Reboot into safe mode with networking, download and run process explorer: http://www.2-viruses.com/wp-content/uploads/PE/eXplorer.exe (backup location). Start it and stop all 3-letter named processes, also processes named like garbage. You might need to edit out registry first.

3. Search for Vista Internet Security 2012 files on hard disk and delete them, edit registry OR scan with decent anti-malware programs : Spyware Doctor, Malwarebytes Anti-Malware, Hitman Pro.

4. Reboot, update your antivirus programs (preferably to internet security versions) and scan again. Make sure you got all the trojans out.

Vista Internet Security 2012 screenshots

Manual Vista Internet Security 2012 removal

Important Note: Although it is possible to manually remove Vista Internet Security 2012, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com.

Remove these Vista Internet Security 2012 Registry Entries:

HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’

HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’

HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’

HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’

HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’

HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’

HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’

HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?

HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’

HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’

HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’

HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’

HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’

HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”‘

Remove these Vista Internet Security 2012 files:

%AllUsersProfile%\[random]

%AppData%\Local\[random].exe

%AppData%\Local\[random]

%AppData%\Roaming\Microsoft\Windows\Templates\[random]

%Temp%\[random]

It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Vista Internet Security 2012 infected files and get help in Vista Internet Security 2012 removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing Vista Internet Security 2012 and similar threats.

Vista Internet Security 2012 is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Vista Internet Security 2012 can help you to remove it after you download the trial version. As soon as the victim downloads Vista Internet Security 2012 trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Vista Internet Security 2012 offers to buy the full version to fix these false errors. If the user agrees, Vista Internet Security 2012 does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Vista Internet Security 2012, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Vista Internet Security 2012, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Vista Internet Security 2012, is nearly impossible to remove manually.