How To: Remove Ave.exe (Fake AntiSpyware)

You might have some strange program in your computers based on their operating system and service pack. Example: total vista security, total xp security, vista antimalware 2010, vista defender pro, vista security tool 2010, vista smart security 2010, xp anti mallware 2010, xp defender pro, xp security tool 2010, and xp smart security 2010. If you have one of any program from this list in your computers, that means your computer has been infected by this malware.

I just got infected today, my computers using windows xp and service pack 3 the result is I got fake xp smart security 2010. First time I was thinking if this is new program from Microsoft because I just updated my Microsoft security essential then this program appears. Because this program annoying me I try to search on google and found out this is an malware. I do scanned my computers using Microsoft security essential but it didn’t found anything (this antivirus is NOT recommended) I didn’t believe when this fake antispyware say my FireFox and IE has been infected, it’s stupid 🙂 I just installed it yesterday. If you got message infected by this fake antispyware please IGNORE THEM or you might have problem with your operating system.

Ave.exe is the main component of each program from fake antispyware group. Basically ave.exe didn’t run without help from any files, there is Trojan when it active it will downloaded ave.exe and save it into your %AppData, this Trojan also will configure ave.exe to start annoying you.

When Ave.exe is active it will totally showing you FAKE infection, it’s also forced anyone infected to buy a license to remove this fake infection, if you following this stupid ave.exe you will lost your time, your money, and your operating system, Just ignore all warning from Ave.exe and prepared to remove this f*cking malware.

How To: Remove Ave.exe


1. Unplug your computer from network, disconnected from Internet.

1. Start your computer in safe mode.

2. Kill ave.exe process from your computer background (use task manager or an program that will allow you).

3. Merge this code to repair your registry (choose only one or using booth is OK):

FIX.REG (Right click choose merge / double click)

Windows Registry Editor Version 5.00

@=”\”%1\” %*”

“Content Type”=”application/x-msdownload”

FIX.INF (Right click choose Install)



HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command

HKCR, exefile\shell\open\command,,,”””%1″” %*”
HKCR, .exe,,,”exefile”
HKCR, .exe,”Content Type”,,”application/x-msdownload”

Then reboot your system.

4. Download MalwareBytes Anti-Malware Install this program on your computers and then UPDATED it first before you start scanned all your system.

5. Scan all your system, Removed all Trojan/virus/malware detected.

6. Updated your best antivirus program, scan all your system, Removed all Trojan/virus/malware detected .

7. After all scan result says no infection, connect back to the Internet then watching your network activity, if there is no activity when computer idle then you’re totally safe from this Trojan (please turn off all background which using Internet activity to make sure nothing used your connection).

Good luck 😀

Similar Posts:


30 thoughts on “How To: Remove Ave.exe (Fake AntiSpyware)”

  1. Hello, will be fine, if you write above, that both scripts (fix.reg and fix.inf) copied from site.
    Also you have removed my copyright from fix.inf, its not good.

  2. Hello, and thank you to all who have created and posted the registry fixes. I’ve been working all day on removing this virus, using a wide variety of techniques. This was the only solution to fix the problem enitrely, and I greatly appreciate the time and effort you have poured into creating this fix. May good fortune smile on your souls.


  3. I found a new trojan package with this ave.exe, this trojan send lot of spam mail via smtp, the best way to check it when you’re connected to internet type “netstat -a” you will see lot of smtp activity (if not connected you wouldn’t see anything). I discover this trojan master on %systemroot%\system32\drivers\UHVFRF.SYS when you try to delete this files using anti-virus or anti-malware it can’t be deleted, even I try using file-assasin this file can’t be deleted. My tricks is booting use dos 6.22 then delete this files, now my notebook totally clean again 😀

  4. Excellent!!! Thanks for posting the the wonderful tool. It was successfully able to remove the ave.exe

  5. This is without a doubt one of the most interesting sites I’ve seen. It’s so easy to assume you’ve seen it all, but there is really some first-rate material online, and I think your website is definitely one of the few!

  6. Thanks for the great blog with the fantastic help. I did everything here but It still seems something is choking my bandwidth i pay for 5 but I am only receiving 2 just since the virus my binaries usta push 8.5 mbps now scraping by at 2. 🙁 remanders traces of the virus perhaps Im still currently running scans.

  7. Luckbox: try to check your net acivity when idle, if you see there is lot activity using your connection that means you have trojan inside your computers (in my case mostly trojan use upstream to spam mail server), remove that trojan, your connection will be normal again.

  8. Adware slows down your internet and is very annoying. Get rid of them using spyware blockers by downloading free programs to get rid of it.

  9. It’s fine but not recommended to have more than one anti-virus as long your computers can run them all and there is no conflict between them 🙂

  10. Speed up your computer and increase its performance. Anti virus programs usually only removes viruses and not spyware. I just subscribed. I have searched the internet using google and found many great spyware removal programs.

  11. It’s look like each people infected by this Trojan has different effect each other? I have no problem with .exe after get infected but I got some trojan sending spam mail, please confirm.

  12. You have a great looking site. I have read a lot of these posts and they have come in use. I have visited many blogs and it seems like most of the information sounds generic or is copied from other site and I can’t ever get useful information or information that is even worth the time that I spend reading it. I myself run several blogs and forums. Most of my blogs pertain to animals,to be more specific, dogs. I have checked out your site and absolutely love it. I would like for you to visit some of my blogs. I know that you probably don’t want me posting all my links here and I do not want you to feel like I am spamming you so therefore I will not leave a bunch of links. However, if it is okay with you, I would like to post a link to one of my most successful sites. The main component of my site is vbulletin forums. I also have a blog on this site along with a function that allow members to enter their dog’s pedigrees. The pedigrees show up in a four generation site where every dog name is a link to that dog’s four generation pedigree. I would really like for you to check out my site and let me know your thoughts on it and ideas or suggestions for improvement. I am especially interested inyour input on my blog because this seems to be your specialty. If you want to know the best gsd pedigree database, then click on this link.

  13. It’s very good instruction to remove ave.exe virus.

    thanks for sharing.


    I want to email you about my perfect anti-malware.

    I need your help,and I’m very glad that you could review it.

    If you like it ,I wiil give you a free license.

    ps:download link:

  14. @jon: Thank you for your offers, I will try your programs later, When it done I will write a short review. You don’t have to pay me, I write anything for free as long it interest me.

  15. remove malware doctor

    I got this website from my pal who told me about this site and at the moment this time I am browsing this site and reading very informative
    articles or reviews at this time.

  16. Keeping Your ID Safe

    I’m really impressed along with your writing skills and also with the structure on your blog. Is that this a paid topic or did you customize it yourself? Anyway stay up the nice quality writing, it’s
    rare to peer a nice weblog like this one today..

  17. You should be a part of a contest for one of the most useful blogs on the internet.
    I’m going to highly recommend this site!

Leave a Reply

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.