How to Manually Remove Antivirus 2010 From Windows XP

Antivirus 2010 is a rogue antivirus program designed to look like a legitimate anti-virus program created by Microsoft. The program installs itself onto your computer and immediately begins launching fake system scans and security pop-ups, which use colors and logos associated with the Windows operating system. The rogue antivirus program tells you that your computer is infected with viruses and that you must purchase the "licensed" version of Antivirus 2010 to remove the viruses. In addition, Antivirus 2010 disables your legitimate anti-virus software. Thus, you need to remove the rogue anti-virus program manually.

Instructions

End Processes

1. Press "Ctrl," "Shift" and "Escape" to open the Processes tab of the Windows Task Manager.

2. End the following processes by clicking the process, located under the Image Name heading, and then clicking "End Process."

   AV2010.exe

   svchost.exe

   wingamma.exe

3. Close the Windows Task Manager.

Delete Registry Values

1. Click "Start," "Run," type "regedit" into the dialog box, and press "Enter" to open the Registry Editor.

2. Delete the following registry entries from the left pane of the Registry Editor by right-clicking the entry and selecting "Delete."

   HKEY_CURRENT_USERSoftwareAV2010

   HKEY_CLASSES_ROOTAppID{3C40236D-990B-443C-90E8-B1C07BCD4A68}

   HKEY_CLASSES_ROOTAppIDIEDefender.DLL

   HKEY_CLASSES_ROOTCLSID{FC8A493F-D236-4653-9A03-2BF4FD94F643}

   HKEY_CLASSES_ROOTIEDefender.IEDefenderBHO

   HKEY_CLASSES_ROOTIEDefender.IEDefenderBHO.1

   HKEY_CLASSES_ROOTInterface{7BC7565C-5062-43CE-8797-DC2C271140A9}

   HKEY_CLASSES_ROOTTypeLib{705FD64B-2B7B-4856-9337-44CA1DA86849}

   HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FC8A493F-D236-4653-9A03-2BF4FD94F643}

   HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E972-E325-11CE-BFC1-08002bE10318}012

   HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E972-E325-11CE-BFC1-08002bE10318}013

   HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E972-E325-11CE-BFC1-08002bE10318}014

   HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "Windows Gamma Display"

3. Close the Registry Editor.

Delete Files, Directories and Dynamic Link Libraries

1. Click "Start," "Run," type "cmd" into the dialog box, and press "Enter" to open the Command Prompt.

2. Type the following commands into the Command Prompt. Press "Enter" after each command.

   del AV2010.exe

   del svchost.exe

   del IEDefender.dll

   del wingamma.exe

   del AV2010.lnk

   del Uninstall.lnk

   regsvr32 /u IEDefender.dll

   rmdir AV2010

3. Close the Command Prompt, and restart your computer.

References

• 2-Spyware: Remove Antivirus 2010