Anti-virus 2010 Vista (Shown in picture) is a virus itself. It is not anti-virus software and is classified as malware and can be hazardous to your PC. The virus infects deep into the registry and in some instances has been found to root kit itself into system files. Removal of this virus is very difficult and the longer it is on your PC the more difficult it will become till it eventually corrupts your system. In tests we have found this virus bypasses the following security programs: AVG, Trend Micro, McAfee, and Norton.

If you have this virus, it is recommended that you contact Support Nerds now via one of our chat links on this page or by visiting our main page http://www.SupportNerds.com or calling us Toll Free: (866)960-0592. We will help you diagnosis if what you have is the virus or another form of malware at no charge. If we do find that is it is a virus, we can assist in removing the virus with the guarantee that if we can’t remove it, you don’t pay and a guaranteed lowest price. We also offer Malware protection for a one-time (no annual fee) fee to our customers for a price that can not be beaten!

For Advanced PC Users Only

If you are an advanced PC user and are familiar with system files and registry setup, then you may be able to disable this virus on your own. If you are not an advanced PC user familiar with the registry and system files, and are trying to save a few dollars, this is not encouraged, as you will probably mess up your PC worse and end up costing yourself 3 times what you could pay now to have it fixed (Not being mean, just being honest).

Below is files found to be related to Anti-Virus 2010 Vista:

Associated XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010 Files:

%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
%UserProfile%\AppData\Local\av.exe <In Antivirus Vista 2010 & Win 7 Antispyware 2010>
%UserProfile%\AppData\Local\WRblt8464P <In Antivirus Vista 2010 & Win 7 Antispyware 2010>

Associated XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010 Windows Registry Information:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

The Cyber Security virus is a new rogue malware virus that will infect your system and tell you your PC is infected. This is a fake anti virus program with the goal of getting you to purchase it so the creators of the malware virus can steal your credit card. If you have this virus our technicians can help you remove it right now. If you are an advanced PC user we are providing you with the known registry entries this virus infects so you can remove the virus on your own. Trying to remove this virus on your own if you are not an advanced PC user is not recommended as you can damage your operating system.

As a symptom of the Cyber Security Virus, you may receive the following fake blue screen:
***STOP: 0x000000D1 (0×00000000, 0xF73120AE, 0xC0000008, 0xC0000000)
A spyware application has been detected and Windows has been shut down to
prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0x00000000
If this is the first time you’ve seen this Stop error screen, restart your
computer. If this screen appears again, follow these steps:
Check to make sure your antivirus software is properly installed. If this is a
new installation, ask your software manufacturer for any antivirus updates
you might need.
Windows detected unregistered version of %product% protection on your computer.
If problems continue, please activate your antivirus software to prevent computer
damage and data loss.
*** SRV.SYS – Address F73120AE base at C00000000, DateStamp 36b072a3
Beginning dump of physical memory…

We Can Remove the Virus Now

If you are infected with this virus and would like assistance in removing the virus, please click the chat button below to speak with a live virus removal expert and we will assist in removing the Cyber Security Virus.

Removing Cyber Security Virus

The following scans have revealed the file infects in the following locations:

Symptoms that may be in a HijackThis Log:

O2 – BHO: &IE Help – {35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC} – C:\WINDOWS\system32\iehelpmod.dll
O4 – HKCU\..\Run: [CS] C:\Program Files\CS\tsc.exe
O4 – HKCU\..\Run: [CSec] C:\Program Files\CSec\cs.exe

Associated Cyber Security Files:

c:\Documents and Settings\All Users\Start Menu\CS
c:\Documents and Settings\All Users\Start Menu\CS\Computer Scan.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Cyber Security.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Help.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Registration.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Security Center.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Settings.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Update.lnk
%AppData%\Microsoft\Internet Explorer\Quick Launch\CS.lnk
%UserProfile%\Desktop\Cyber Security.lnk
c:\Program Files\Common Files\CSUninstall
c:\Program Files\Common Files\CSUninstall\Uninstall.lnk
c:\Program Files\CS
c:\Program Files\CS\tsc.exe
C:\Program Files\CSec\
C:\Program Files\CSec\cs.exe
c:\WINDOWS\system32\iehelpmod.dll

Associated Cyber Security Windows Registry Information:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\CS
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CS”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CSec”

• Installing a fake anti virus program and telling you everything is infected and that you should purchase it’s produce for protection (Do not purchase this product, it is a malware virus and they will steal your credit card)
• Disabling of programs, meaning you can not open any .exe, .com, .reg, or any other common program.
• Display of the following alert:
  Windows Security alert
  Windows reports that computer is infected. Anti Virus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now.

Were Available Right Now to Help You Remove the Virus

If you are a standard PC user, Anti Virus System Pro is a severe malware virus and should not be removed by a standard user. You can chat for free with one of our Certified American Technicians by clicking the green chat button below. The technician will help you evaluate and diagnose your system. The Technician can then remote into your system and remove the virus immediately.
We can use our Recovery CD to fix your system remotely even if you are unable to start Windows!

How to Remove Anti Virus System Pro

Note: This is only for advanced windows users, modifying your registry to remove the anti virus system pro virus could result in damaging your computer further!

If you are an advanced PC user, you can use the following data below to remove the virus manually:

Symptoms that may be in a HijackThis Log:
The file names may be random.

O1 – Hosts: ::1 localhost
O1 – Hosts: 209.44.111.57 security.microsoft.com
O1 – Hosts: 209.44.111.57 inetavirus.com
O1 – Hosts: 209.44.111.57 www.inetavirus.com
O1 – Hosts: 91.212.127.227 osawarepro2009.microsoft.com
O1 – Hosts: 91.212.127.227 osawarepro2009.com
O1 – Hosts: 91.212.127.227 www.osawarepro2009.com
O2 – BHO: BHO – {BAD4551D-9B24-42cb-9BCD-818CA2DA7B63} – C:\WINDOWS\system32\iehelper.dll
O4 – HKCU\..\Run: [system tool] C:\WINDOWS\sysguard.exe
O4 – HKLM\..\Run: [vghuvmdh] C:\Documents and Settings\Bleeping\Local Settings\Application Data\qhpwjr\excksysguard.exe
O4 – HKCU\..\Run: [vghuvmdh] C:\Documents and Settings\Bleeping\Local Settings\Application Data\qhpwjr\excksysguard.exe

Associated Antivirus System Pro Files:

c:\WINDOWS\sysguard.exe
c:\WINDOWS\system32\iehelper.dll

Associated Antivirus System Pro Windows Registry Information:

HKEY_CURRENT_USER\Software\AvScan
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”

Understanding the Types of Viruses

There are various types of viruses, and different classifications of each, to better understand the different types of viruses, visit our blog post about Virus Types.

Understanding the File System

The system files are stored in your “C:/Windows/” folder.  These are the core files that drive your operating system. Viruses have begun to embed themselves within these files so that it makes it hard for the anti-virus community to remove them. These viruses are known as root kit viruses. These are the most difficult viruses to remove and typically require a hands on approach from an expert who has had years of experience in dealing with viruses and the file system.

What is the Registry?

The easiest way to understand the registry is to imagine it to be a storage center for important things used to run your operating system. It stores settings that are critical to the programs that run on your computer. Some of the items contained in the registry are the start up items for your PC, information about the programs that are installed as well as user preferences. Under no circumstance should anyone attempt to edit their registry unless they are 100% sure of what they are doing. You should not attempt to edit the registry unless you are an advanced windows user and even then only if you know what the effect of the edit will be.  Incorrectly editing the registry could result in the your system becoming inoperable.

So How do I get Rid of this Virus Safely?

You have a several options if you think you have been infected by a virus. You can type in the symptoms you are experiencing into any search engine. This will yield a list of articles and forum posts from people who have had symptoms similar to yours. You then go through each article and forum post until you find information that most closely resembles your exact symptoms.  Once you do that you continue reading to find a solution in the article or forum post. Once you find the instructions for removal you follow the steps outlined to remove the virus. This may or may not fix your issue. If not, you start over. Another option is to download more anti-virus software. This may or may not be effective because there are new viruses released daily and there is no anti-virus program that can protect you 100%.  Another choice is to take your computer to a local repair store. However, this is costly, typically in the $150 range, inconvenient and most of all it’s unnecessary. We think the best solution is to have an online expert remove the virus for you by remotely logging into your computer. You can come to Support Nerds and get it resolved by one of our U.S. Based Certified Experts. We perform virus removal and other services starting at $49.95 with a 100% No Fix, No Pay Guarantee!

Tools that are run from the “Run” Command

If you go to Start>Run, you will see a window pop up with a text box. Using this window and text box you can type in the following commands to bring up system settings:

• taskmgr
  Task Manager will display all running processes of a PC, this is a good place to look if you have a program that wont close and want to close it using the administrator settings.
• services.msc
  This will bring up a window that will display all running services on your system and details about them
• msconfig
  MSConfig displays start up items and information and settings for booting you computer.

Using Safe Mode to Access Your Computer

You can also use Windows Safe Mode to access your PC which means that it will load the core system files needed to minimally run the operating system. This can be done by pressing F8 over and over as soon you turn on the computer. You can visit our “How to Boot Up in Safe Mode” to understand Safe Mode better.

Are You in Need of Computer Repair or Virus Removal?

If you need PC Support or think you might be infected by viruses, spy ware, or malware,  feel free to visit our site at http://www.supportnerds.com and chat for free with a U.S. Based Certified Expert who will diagnose your problem and can perform a virus removal, typically in under 1 hour with out you ever leaving the comforts of home.

Start a Live Chat Now With a U.S. Based Certified Expert!

Before the Days of Support Nerds

Before Support Nerds and the ability to remote into customers PC to remove viruses and malware was a possibility, consumers would have to take their PC to a local retail store for repair. This would result in high prices (+$100) and typically would leave you without a PC for days. This would leave many PC owners with separation anxiety. In today’s world it is almost impossible to get by without a PC due to email communication and daily networking.

A New Beginning for Virus Removal and Computer Repair

Now consumers have the possibility of receiving virus removal and other computer repair categories remotely via Support Nerds Signature Support Platform starting at $49.95. How it works is:

1. Customer visits http://www.SupportNerds.com
2. Click the Live Chat Button
3. Enter your name and in less than 1 minute you will be connected to a Live U.S. Based Certified Expert
4. The Expert will chat with you and listen to your issue and diagnose the problem for free (Geek Squad charges $10+ just for diagnosis of issue)
5. The Expert will present you with a work order for the virus removal or computer repair.
6. You will hit accept and enter your payment information through our secure payment platform.
7. Upon successful payment, you will download a small program that will allow the Expert to remote into your computer and begin the virus removal or computer repair.
8. The Expert will now resolve the issue immediately and return your PC to a healthy state.

Support Nerds 100% No Fix, No Pay Guarantee

Were so sure that you will be completely satisfied with our service, that if we are unable to resolve your issue, or you are less than 100% satisfied with our service, we will immediately refund you your full service purchase, no questions asked and no hoops to jump through.

If you think your PC might be infected with a virus, spyware, or even malware, feel free to start a chat with one of our U.S. Based Certified Experts. We can remove the virus typically in under 1 hour using our remote tools for $49.95. Since our Experts work remotely, this means you never have to leave your home, and we never have to visit your home. It’s the quickest and most affordable resolution for virus removal. Please visit http://www.SupportNerds.com to speak with an expert right now.

No Anti-Virus Software

The first mistake a lot of customers make is to leave their anti-virus not up to date or lack to have anti-virus software at all. Although finding the right anti-virus for you is a different conversation, it is important to choose one that you find fits your needs best. We always suggest MalwareBytes for it’s active protection and ability to stop infections cold in their tracks.  This is why we offer this software free to every customer who purchases our PC Total Care service.

Mistaking Windows for Windows

Some viruses like to infect your PC by tricking the user into thinking it is a normal windows window. This gets you to click it which then gives you another misleading pop up window which gives the okay to the virus to infect your PC. They do this by creating images of common windows on your PC and putting them in a web page so you think there actually a window. If it looks suspicious, don’t click it, and if it looks like it’s a window in a window, that’s also a clear sign that it is probably a virus trying to infect your system.

Clicking Yes or Ok to Pop Ups

Commonly,  your browser will give you a pop up alert, saying something to the extent of “You are about to leave this site” with your choices being OK or Cancel. Our Support Platform does this if you are closing the window during a chat to keep you from potentially losing the chat between you in the expert and is the proper use for this. Some malicious sites like to use this for the go ahead for you to infect your PC with a virus. If you are unsure of the popup, always click cancel, but make sure it is not a fake image of one like we talked about above.

P2P Filesharing

Lets just be honest here, most people use a P2P sharing system like limewire, bearshare, or bit torrents. While we will tell you it not okay to download copyright material and this is illegal, you may continue to use the P2P programs for use with free products. P2P is a great invention for users that has been abused by malicious people. They will create a virus and make it look like a file you are searching for to download. You will download it and open it and instantly the virus will infect your PC. I will clearly tell you that using P2P is about the best way to get a virus so if your not familiar with how to navigate these programs, it is best to steer clear of them.

Virus Removal

If you think your PC might be infected with a virus, spyware, or even malware, feel free to start a chat with one of our U.S. Based Certified Experts. We can remove the virus typically in under 1 hour using our remote tools for $49.95. Since our Experts work remotely, this means you never have to leave your home, and we never have to visit your home. It’s the quickest and most affordable resolution for virus removal. Please visit http://www.SupportNerds.com to speak with an expert right now.

Start a Live Chat Now With a U.S. Based Certified Expert!
We Specialize in Virus Removal

You get Redirected to Different URL’s when Your on the Internet

If you’re surfing the web and you type in your favorite address and it takes you to some other site that typically is trying to sell you something or throws a bunch of pop-ups on your screen, you may have a hijacked computer. This is where a virus has infected your PC and will steer you to different web sites then the ones you requested. It sometimes can get so bad your unable to surf the Internet at all.

Strange New Programs that Constantly Tell You that Your PC has a Virus

This is one of the newest forms of malware and causes a lot of headaches to PC users. One day you’ll notice a new little icon running in your tray, typically it’s a shield or something similar and it will constantly tell you that you are infected and pushes you to buy their software. This is a malware virus that will only attempt to get you to purchase it so it can steal your credit card number. These virus sometimes just get down right annoying as the longer they are on your PC, the longer the more they will slow down your computer experience.

Constant Freezing and Random Rebooting

Sometimes viruses will slow down your PC extremely and even randomly reboot your computer for no reason. These viruses typically are there for one reason, just to cause you problems.  Typically, if this occurs, you can rest assure that a virus is the cause of this problem.

Think You Might Have a Virus?

If you think you might be infected by viruses, spy ware, or malware, feel free to visit our site at http://www.supportnerds.com and chat for free with a U.S. Based Certified Expert who will diagnose your problem and  can perform a virus removal, typically in under 1 hour with out you ever leaving the comforts of home.

Start a Live Chat Now With a U.S. Based Certified Expert!