# Removing Vista anti-virus. HELP! **URL:** \ **Category:** Factual Questions\ **Created:** [April 28, 2011, 4:24pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047 "2011-04-28T16:24:51Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![pkbites](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pkbites/32/204_2.png) [@pkbites](https://boards.straightdope.com/u/pkbites)\ **Post date:** [April 28, 2011, 4:24pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/1 "2011-04-28T16:24:51Z")
Last night my computer got attacked by the Vista anti-virus rogue spy-ware program. This nasty sonovabitch prevented me from going on the internet or doing much of anything else. Even worse, Spy Sweeper (which has been excellent in the past) didn’t catch it and couldn’t find it when I swept. WTF? I had to go online using my lap top and hacking off a neighbors WIFI. With help from [THIS](http://www.2-spyware.com/remove-vista-anti-virus-2011.html) cite I got the attack to stop. The problem is, the Vista Icon is still on the lower toolbar of IE. My wife said it popped up a couple times this morning and asked it she wanted to scan the computer for infections. How do I get this mofo completely off my computer? ---
**Author:** ![ZipperJJ](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/zipperjj/32/211_2.png) [@ZipperJJ](https://boards.straightdope.com/u/ZipperJJ)\ **Post date:** [April 28, 2011, 5:13pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/2 "2011-04-28T17:13:34Z")
I would back up the data you want to keep to another system or to DVD, and reinstall Vista. Sometimes the damage done by a virus and the subsequent virus cleanup leaves you with a computer that is never quite right and it’s soooo much better just to reinstall. ---
**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\ **Post date:** [April 28, 2011, 5:18pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/3 "2011-04-28T17:18:45Z")
I’d start with malwarebytes from [malwarebytes.org](http://malwarebytes.org). Download it, install it, update it, run it, delete anything it finds. Run it again, delete anything it finds. Boot to safe mode (if you weren’t already there) Run it again, delete anything it finds. Go back to regular more Run it one more time and delete anything it finds. ---
**Author:** ![yorick73](https://avatars.discourse-cdn.com/v4/letter/y/b5a626/32.png) [@yorick73](https://boards.straightdope.com/u/yorick73)\ **Post date:** [April 28, 2011, 5:24pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/4 "2011-04-28T17:24:23Z")
No advice on the actual mechancs of getting rid of that thing from me, but when I had a really nasty infection on my computer I went to [bleepingcomputer.com](http://bleepingcomputer.com). It is free and composed of computer types who love doing this kind of stuff on the side. If you are so inclined they do accept donations via paypal but it is not required. It takes a few days for a pro to get around to your post and probably a few days of back-and-forth before your problem is resovled but, if you don’t have any luck with DIY give it a shot. Oh, I should mention that I have nothing to do with the site. I found it while seeking help with my own computer issue and it was a lifesaver (or at least a computer saver!) ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [April 28, 2011, 5:27pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/5 "2011-04-28T17:27:46Z")
If Malwarebytes finds the same spyware on two consecutive scans, there is probably a rootkit installed that is hiding the real source of the infection. Try the [Kaspersky TDSSKiller](http://support.kaspersky.com/faq/?qid=208283363), which targets rootkits, especially the TDL3 &TDL4 rootkits, which are the most common ones in the wild right now. The download link is at the bottom of that page. You may have to download it from a clean computer onto a flash drive to run it on the infected computer. ---
**Author:** ![Marconi\_N.Cheese](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Marconi\_N.Cheese](https://boards.straightdope.com/u/Marconi_N.Cheese)\ **Post date:** [April 28, 2011, 10:27pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/6 "2011-04-28T22:27:53Z")
Running anti-malware/antivirus tools from safe mode is good, running them from a cd-rom boot disk is even better. Search for antivirus boot cd. I know AVG & Kapersky have them available. I suspect most mainstream vendors offer them. If possible, do the download & burn from a known clean system. I don’t think you’ll have to do the backup/wipe/reinstall dance with what you’ve got, but if you do go that route be aware you may be backing up the source of infection too. ---
**Author:** ![RealityChuck](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/realitychuck/32/195_2.png) [@RealityChuck](https://boards.straightdope.com/u/RealityChuck)\ **Post date:** [April 28, 2011, 11:33pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/7 "2011-04-28T23:33:25Z")
A forgotten tool: if you know when you got infected, use System Restore to go back before you got the infection. Most malware has stopped defending against this. ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [April 28, 2011, 11:46pm UTC](https://boards.straightdope.com/t/removing-vista-anti-virus-help/580047/8 "2011-04-28T23:46:51Z")
> [@pkbites](#): > > With help from [THIS](http://www.2-spyware.com/remove-vista-anti-virus-2011.html) cite I got the attack to stop. That was a pretty unhelpful page. Here are some [much more comprehensive removal instructions](http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-2011) for the infection you have. It is capable of changing names through about a dozen different Vista permutations, including Vista Anti-Virus 2011.