Virus Removal Tool

It is a rogue anti-spyware program similar to the well known XP Antivirus rogue application.
http://www.bleepingcomputer.com/malware-removal/antivirus-2008

Restart your PC in safe mode with networking
http://www.pchell.com/support/safemode.shtml

If your Wallpaper has changed then download and run Wallpaper Hijacker
http://www.majorgeeks.com/Wallpaper_Hijack_Remover_d4816.html

Download, install, and run a full scan with Rogue Remover
http://www.malwarebytes.org/rogueremover.php

Run a full scan with Micro Trend House Call
http://housecall.trendmicro.com/

You should also download, install and run a full scan with Malwarebytes
http://www.malwarebytes.org

XP Antivirus 2010 is a is a rogue anti-spyware program from the same family as Antivirus 2008 and Antivirus 2009.

Like its previous incarnations, Antivirus 2010 is advertised through the use of advertisements on the Web pretending to be online anti-malware scanners. These advertisements pretend to scan your computer and then state that your computer is infected and that you should download and install Antivirus 2010 to remove these infections.

These rogues are also known to be advertised and installed through Trojans that display fake security alerts in your Windows taskbar stating you are infected. Once you click on one of these alerts, it will bring you to the download page for Antivirus 2010, or even download and install it without your permission.

Once Antivirus 2010 is installed on your computer, it will be automatically configured to run when you logon to Windows. This is done by adding a startup that launches the C:\Windows\System32\wingamma.exe executable.

This executable will then launch the AV2010.exe and the fake Windows Security Center. Once running, it will scan your computer and list a variety of infections that cannot be removed unless you first purchase the software. This infection will also randomly display fake security alerts on your computer stating that you are infected or have some sort of security risk. If you click on these alerts, it will prompt you to purchase the software. These fake alerts, along with a fake Windows Security Center that advertises Antivirus 2010, are used to further scare you into thinking you are infected so you purchase the software.
____________________________________________

To FIX :-

1.Download Malwarebytes’ Anti-Malware, or MBAM, from the following location and save it to your desktop:

http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe

2. Once downloaded, close all programs and Windows on your computer.

3. Double-click on the icon on your desktop named Download_mbam-setup.exe. This will start the installation of MBAM onto your computer.

4.When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button.

5. MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box.

6.On the Scanner tab, make sure the the Perform quick scan option is selected and then click on the Scan button to start scanning your computer for Antivirus 2010 related files.

7.MBAM will now start scanning your computer for malware. This process can take quite a while, so we suggest you go and do something else and periodically check on the status of the scan.

- You should click on the OK button to close the message box and continue with the Antivirus2010 removal process.

8.You will now be back at the main Scanner screen. At this point you should click on the Show Results button.

9.A screen displaying all the malware that the program found.

10.You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine.

11. When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.

12.You can now exit the MBAM program.
_____________________________________________