Computer Repair Tech

Here's a very complete description of the insidious, really nasty virus, Antivirus Pro 2009, that is making the rounds on campus, and I'm sure on a few of your home PCs running Windows. Antivirus Pro 2009 should not be confused with real antivirus software such as Symantec Antivirus, McAfee, or AVG (I personally use this on the two Windows PCs I have at home.) Here's a description from the Symantec Security Response site about the Antivirus Pro 2008 version -- they have nothing posted (or don't know) about the 2009 version yet!

I found this really great overview of this malware while looking for removal information. (Note: Regrettably, I don't have the link to the originating web site.)

Antivirus Pro 2009 is a rogue anti-spyware program from the same family as AntiSpywareXP 2009 and XP Antispyware 2009. AntiSpyware Pro 2009 is advertised through the use of Trojans that display fake security alerts and messages stating that your computer is infected. These alerts will also automatically install Antivirus Pro 2009 on to your computer.
As part of its installation process, Antivirus Pro 2009 will configure itself to start automatically when you logon to your computer. It will also create a variety of fake malware files on your computer that are completely harmless, but are installed so they are detected by AntivirusPro 2009 when it scans your computer. When Antivirus Pro 2009 starts it will automatically scan your computer and list variety of infections that cannot be removed unless you first purchase the program. Many of these infections are the fake files that the program installed, as described above, as well as legitimate Windows files that are being called infections. It gives these false results in order to scare you into purchasing the software.
While running, you will also find that your Internet Explorer has become hijacked. When browsing the web, Antivirus Pro 2009 will randomly display a screen stating that there has been insecure internet activity and that there is a threat of a virus attack. It then prompts you to either get protection or continue to the site. Regardless of the option you select, you will instead be brought to a web page where it tries to sell you the program. This is just another scare tactic and should be ignored.

I hope to post complete removal instructions here in the very near future. This one is a baddie!

Please make sure you don't click on an OK button when you receive a pop-up window about Your computer is infected! Click here to ... while browsing web sites. Just click the close box. If a software install or some process starts up, do your best to cancel the process and not let the software install the Antivirus Pro 2009 on your PC. Better yet, use Mozilla Firefox as your primary browser and relegate using Internet Explorer on sites that absolutely require it for access.

Better yet, use Linux (Ubuntu is my personal favorite!) on your personal computer and don't even bother with Windows! It truly is a Windows replacement!