Just wanted to bump this.... seems similar to the infection I just cleaned up.
I was infected by AntiVirus XP 2008 and RichVideoCodec, and a couple other virus. I also had my wallpaper tab and screen saver tab removed.
The initial infection vector was "wmcodec_update.exe" I am not sure if my wife downloaded this and ran it, or if a java/firefox vulnerability was used to download then run it. It was in the trash, but came from her folder inside "my documents".
I used Avast boot time scan to clean up the some of the mess. I also used Malwarebytes' software to finish cleaning up.
I uploaded wmcodec_update to
http://www.virustotal.com . Here is the report.
http://www.virustotal.com/analisis/207632e17389602b5a19f0940b1b5520More info on wmcodec_update here.
http://info.prevx.com/aboutprogramtext.asp?PX5=D1239C3527E5526DEC49048B5DF64C009681CBDEWhat is the preferred/proper method of sending the file to Avast to get it into the next definitions update?
edit:
JEAN*
Still having issues with a your screensaver or wallpaper tabs missing?
AV XP 2008 removed my Wallpaper tab, and my screensaver tab, and I needed to go into the Group Policy Editor to restore them.
Click start -> Run. type in gpedit.msc
Navigate to User Config > Admin Templates > Control Panel > Display.
Hide Desktop Tab should be disabled
Hide ScreenSaver Tab should be disabled.
check the others to make sure nothing else is missing