Vista Home Security Virus

Compnewbie01

Senior member
Aug 8, 2005
603
4
81
Yesterday I turned on my computer to find out it had a virus. When I tried to open my web browser it opened a fake scanning app listing several "viruses". It had the name 'Vista Anti Spyware 2011' and even overrided Windows Defender. I was able to use my phone to search information and the best thing I came up with was to download a program called RKill.exe (IE x64 browser worked) and run it to disable the virus. I did that then used MalwareBytes to remove 8 different malicious files.

Everything was fine until just a few minutes ago. Now the same virus just opened with the name 'Vista Home Security' and it happened all over again. I ran RKill.exe and MalwareBytes which removed 2 more files.

My question is how do I stop this from happening? It seems the virus is just reloading itself with a new name after I delete it. Google shows me that there are several different names for this one virus and does not say how to keep it from reoccuring. The best guides I can find just say to run MalwareBytes but that isn't working as a permanent solution for me.

Thanks
 

Chiefcrowe

Diamond Member
Sep 15, 2008
5,056
199
116
Not sure how you got it. are all your programs and OS patched and do you have a firewall and current AV?

I'd also recommend scanning with an offline AV CD such as Avira.
 

Compnewbie01

Senior member
Aug 8, 2005
603
4
81
I have all the Windows updates. I currently use Avira free edition and it also updates itself daily.
 

pcslookout

Lifer
Mar 18, 2007
11,959
157
106
Do you run on a limited user account or an admin account in windows ? Have you enabled DEP for all programs and installed Microsoft's EMET ?

Guessing no. I know you don't use AppLocker or Software Restriction Policies. Even Parental Controls would work but it doesn't have as many options. Easier though.