I have heard of this before m8, here is a possable solution (UNTESTED!)
---------------------------
What is XPAntivirus
XPAntiVirus (also known as XP Anti Virus, XPAnti Virus and XP AntiVirus) is a fake spyware removal tool that is usually downloaded onto your computer by a Trojan (most likely the Zlob Trojan) or under other dubious circumstances. XPAntiVirus is not a legitimate spyware removal tool. XP Antivirus has moved on to be cloned onto other rogue anti-spyware programs like Antivirus 2009, Antivirus 2008, Vista Antivirus 2008, Windows Antivirus 2008 and others.
Once downloaded, XPAntiVirus begins to haunt the user by displaying false security alerts that read:
"WARNING!!! Quick System Scan Results
XP antivirus Online Scanner detected
dangerous spyware on your system!
Detected malicious programs can damage your computer and compromise your privacy. It is strongly recommended to remove them immediately."
XPAntiVirus may also create nine (9) entries in your Windows Registry that convince you that your computer is infected with spyware, which is really XPAntiVirus that is the spyware and not an outside source. These entries are simply created by XPAntiVirus so when it runs its system scan those entries will be considered as threats. The purpose of these tactics is to get you to purchase the full version of XPAntiVirus spyware removal application.
Possible Solutions
http://majorgeeks.com/ <<< might help you!
Do not touch the registery unless you are sure, about what you are doing.
Zlob can also be removed by using:
smitfraudfix
http://siri.geekstogo.com/SmitfraudFix.phpThen
Combo Fix
http://www.bleepingcomputer.com/comb...o-use-combofixOr download from this site..
http://icrontic.com/forum/showthread.php?t=55039Save both to your desktop.
Do not RUN on download, SAVE TO DESKTOP.
Disable any anti virus.
DO NOT TOUCH KEYBOARD WHILE APPLICATIONS ARE BEING USED.
Reboot, as your PC reboots, press F8 or F12 Select SAFE MODE, you should now be in safe mode, (safe mode will appear in each corner of screen) dont worry about the nagging messages.
Disconnect from the internet...
Click on smitfraudfix, follow the instructions, select clean (2)
follow the instructions from the web sites I have posted.
Then run Combfix, click on the red button icon select RUN.
Follow the instructions from the web sites I have posted.
Combofix will self delete after being run.
Both applications will prepare a report, if Zlob persists, post those reports here.
Make sure you back up important files to a disc or external hard drive.
These are ruthless applications, make sure you read/print off the required information on the web sites I have posted here.
After clean is complete, run a full scan, or visit:
http://housecall.trendmicro.com/uk/YOU USE THE ABOVE AT YOUR OWN RISK!