Home Malware Programs Rogue Anti-Spyware Programs Vista Home Security 2013

Vista Home Security 2013

Posted: November 1, 2012

Threat Metric

Ranking: 3,781
Threat Level: 2/10
Infected PCs: 14,270
First Seen: November 1, 2012
Last Seen: October 17, 2023
OS(es) Affected: Windows

Vista Home Security 2013 is one of many fake anti-malware scanners within the FakeRean classification of the same, and, like other members of FakeRean, Vista Home Security 2013 is capable of harming your browser's security or blocking programs without a legitimate justification. Vista Home Security 2013 is most well-known for its fake security features, which display inaccurate warnings and scanner results about malware infections and attacks on your computer. Even as Vista Home Security 2013 continues to cause problems for your PC, Vista Home Security 2013 will request money for a software registration process that Vista Home Security 2013 claims will let it fix all of these issues, but SpywareRemove.com malware researchers recommend keeping your money to yourself. As confirmed scamware, Vista Home Security 2013 should be deleted by a legitimate brand of anti-malware software.

Vista Home Security 2013 – the Intruder that Pretends to Be Security

Vista Home Security 2013 and related PC threats have been known to use several types of infection routes, although e-mail spam links, social networking spam links and sites abusing drive-by-download vulnerabilities all have been implicated in FakeRean-based attacks.

SpywareRemove.com malware experts have found a usual FakeRean attack will attempt to detect your operating system and deploy an appropriate brand of rogue anti-malware program: for example, you will experience a Vista Home Security 2013 infection on Windows Vista, an XP Home Security 2013 infection on Windows XP or a Win 7 Home Security 2013 Infection on Windows 7. Other members of Vista Home Security 2013's family can vary their brand names more significantly than these examples, such as Antivirus 2008 Pro, Antivirus XP 2008, Windows Antivirus 2008, Vista Antivirus 2008, PC Clean Pro, Antivirus Pro 2009, Rogue.Vista Antivirus 2008, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, XP Security 2012, XP Home Security 2012 and AntiVirus PRO 2015.

Vista Home Security 2013 launches itself without your consent and displays pop-up alerts and automatic system scans. Both Vista Home Security 2013's pop-ups and scans may display malware infections, such as keyloggers and banking Trojans that are identified by technical names, but this information doesn't correlate to any actual infections on your computer. In particular, SpywareRemove.com malware research team especially advises that you avoid purchasing Vista Home Security 2013, although using a FakeRean-compatible registration key to fake registering Vista Home Security 2013 isn't harmful to your computer (and can be used to assist with Vista Home Security 2013's removal).

The Damage that Vista Home Security 2013 Does When You're Distracted by Its Pop-Ups

Vista Home Security 2013 may be categorized as a rogue anti-malware product on account of its fake security functions, but these attacks are far from the full extent of Vista Home Security 2013's iffy features. Major symptoms of a Vista Home Security 2013 (or other FakeRean) infection as defined by SpywareRemove.com malware analysts include:

  • Unusual error pages that appear when you use your browser to try to navigate to safe websites.
  • Programs being blocked without your permission or any legitimate justification (although Vista Home Security 2013 may display a fake warning message about the blocked program being compromised).
  • General security issues such as circumvented firewalls and modifications to Internet Explorer's security zones.

Because Vista Home Security 2013 infections may include other forms of malware and will resist deletion, using anti-malware programs to delete Vista Home Security 2013 should be a common sense solution. If Vista Home Security 2013 prevents the program that you'd like to use from launching, SpywareRemove.com malware researchers recommend that you boot Windows into Safe Mode to disable Vista Home Security 2013 temporarily.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%UserProfile%\Start Menu\Programs\Vista Home Security 2013\Uninstall Vista Home Security 2013.lnk File name: %UserProfile%\Start Menu\Programs\Vista Home Security 2013\Uninstall Vista Home Security 2013.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programs\Vista Home Security 2013\Vista Home Security 2013.lnk File name: %UserProfile%\Start Menu\Programs\Vista Home Security 2013\Vista Home Security 2013.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Desktop\Vista Home Security 2013.lnk File name: %UserProfile%\Desktop\Vista Home Security 2013.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%AppData%\Roaming\Microsoft\Windows\Templates\[RANDOM CHARACTERS].exe File name: %AppData%\Roaming\Microsoft\Windows\Templates\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%CommonAppData%\[RANDOM CHARACTERS].exe File name: %CommonAppData%\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%LocalAppData%\[RANDOM CHARACTERS].exe File name: %LocalAppData%\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Temp%\[RANDOM CHARACTERS].exe File name: %Temp%\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = ''HKEY_CURRENT_USER\Software\Classes\ "(Default)" = 'Application'HKEY_CURRENT_USER\Software\Classes\\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\\DefaultIcon "(Default)" = '%1'HKEY_CLASSES_ROOT\ah\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = ""%LocalAppData%\.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe""HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = ""%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode"HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = ""%LocalAppData%\.exe -a "C:\Program Files\Mozilla Firefox\firefox.exe""HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Vista Home Security 2013"HKEY_CLASSES_ROOT\ah\shell\open\command "IsolatedCommand"

Additional Information

The following URL's were detected:
confrontationdrunk.com
The following messages's were detected:
# Message
1Critical System Alert!
Unknown software is try to take control over your system!
2Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.
3Privacy threat! Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
4Severe system damage!
Spyware and viruses detected in the background. Sensitive system components under attack! Data loss, identity theft and system corruption are possible. Act now, click here for a free security scan.
5System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working in the background right now. Perform an in-depth scan and removal now, click here.
6System hacked!
Unknown program is scanning your system registry right now! Identity theft detected!
7System hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
8Threat detected! Security alert!
Your computer was found to be infected with privacy-threatening software. Private data may get stolen and system damage may be severe. Recover your PC from the infection right now, perform a security scan.
9Virus infection!
System security was found to be compromised. Your computer is now infected. Attention, irreversible system changes may occur. Private data may get stolen. Click here now for an instant anti-virus scan.

Loading...