Help!!! AVE.EXE VIRUS! HELP HELP HELP!?
April 14, 2010 | 
Author 
I think that my computer was infected with the ave.exe virus. First, every time I turn on my computer I have this popup saying “Vista Security Tool 2010-Unregistered Version.” It starts scanning my computer and finds 32 Trojans. Then annoying messages pop up saying that my computer is infected and I need to buy the 2010 Vista Security to get rid of these viruses. How can I get rid of this ave.exe virus? Please help me because this is a school laptop I am using. Thank you so much!
Incoming search terms:
Posted in malware removal guide | 
Tags: Annoying Messages, ave.exe, ave.exe anti virus vista unregistered, ave.exe virus help, Exe Virus, Help, laptop, patch ave.exe, remove ave.exe virus, Security Tool, Trojans, Unregistered Version, virus, Virus Help, Viruses, vista security tool unregistered safe mode, xp security unregistered version virus, xp unregistered ave
go to this site for help. http://social.bioware.com/brc/1357256
Try a system restore from safe mode to before when the problem started:
Start -> Programs -> Accessories -> System Tools -> System Restore
Type Ctrl/Shift/Escape to bring up the task manager.
Kill the ave.exe process. The popups will disappear. Leave the task scheduler up.
Type Windows/R (to get the Run box) and type regedit and OK.
Ave.exe will start again, just do step #2 again.
In Regedit, go to HKCR.exeshellopencommand. You will see something like this for (default):
“C:Documents and Settings[your account]Local SettingsApplication Dataave.exe” /START “%1″ %*
Modify the value to be:
“%1″ %*
Do the same with HKCRsecfileshellopencommand.
Delete ave.exe from the location in step 5.
At this point, you have control back and no more popups.
Download the current version of Malwarebytes’ Anti-Malware and run it.
Choose to fix the items the scan found.
Run a scan of your regular anit-virus program
Re-boot your computer in SAFE MODE
To run it in Safe Mode, as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Now downlod this removal tool
http://www.net-studio.org/eng/patch/patch/239-free-malware-removal-tool-to-remove-total-vista-security.html
Extract
Run
Click on the delete button
Wait for a confirmation and restart your computer
Good luck
You need to download and run a program called Rkill which will stop the pop-ups and allow you to run the virus/malware removal software. This site has some more info – http://www.foxthis.com/computers/vista-security-tool-virus/
Malwarebytes is a great free program which I used myself to kill this virus. You only need the free version as well to remove it. Make sure you run a full system scan with it.
You don’t need to go to safe mode, and you don’t need Malwarebytes (that never worked for me either).
Just download Ad-Aware, that’s the ONLY program that worked for me, and it had the virus gone in about 15-20 minutes. I made a blog just for this purpose, including a step-by-step guide, along with my experiences with the virus. It’s the only way I was able to PERMANENTLY get rid of the virus.
Follow these instructions:
1. Click Start->Run (or WinKey+R). Input: “command”. Press Enter or click OK.
2. Type “notepad” as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USERSoftwareClasses.exe]
[-HKEY_CURRENT_USERSoftwareClassessecfile]
[-HKEY_CLASSES_ROOTsecfile]
[-HKEY_CLASSES_ROOT.exeshellopencommand]
[HKEY_CLASSES_ROOTexefileshellopencommand]
@=”"%1″ %*”
[HKEY_CLASSES_ROOT.exe]
@=”exefile”
“Content Type”=”application/x-msdownload”
4. Save file as “exefix.reg” (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files
5. Double-click to open exefix.reg. Click “Yes” for Registry Editor prompt window.
6. Download Spyware Doctor or other automatic removal program and run a full system scan.
You’re a few simple steps away from a solution to this menace.
To remove Vista Security Tool 2010 you need to follow these Removal Instructions:
http://www.pcthreat.com/parasitebyid-9120en.html
I just came from searching for a good page on Bing and came to yours. I have to say these templates are nice. Thank you for sharing them in your blog post. I will be sure to pass this link to others.