Mechling/Mechcom Support Group   

I am getting a security alert that I am infected directing me to run WinPro Anti-virus?

   This virus (Trojan.Virantix) is yet another variant that tells you are infected with potentially harmful spyware or viruses and it directs you to download and run "WinPro Antivirus" or "Antivirus 2009" to remove these threats. It is actually directing you to install the virus so it can then put more viruses on your computer and spread itself through your internet connection.

When Trojan is executed, it creates a mutex to ensure that only one copy of the threat is running on the computer at any time. It executes and runs at startup and disables your anti-virus software from scanning or even updating. It can also change settings in your firewall to allow it unrestricted access to the internet while blocking you from having internet access through internet explorer.

The Trojan then displays the following message every five minutes:
Title: Windows Security Alert

Message: Warning! Potential Spyware Operation!

Your computer is making unauthorized copies of your system and
Internet files. Run full scan now to prevent any unauthorized access
to your files! Click here to download spyware remover ...

The Trojan may also display the following message four minutes after the computer has started:
Message: Your computer is infected!

The Trojan then connects to a website that seems like a legitimate site (but it is not)
 and executes an anti-virus software which is actually the virus.

Once this virus has gotten to these stages of the infection, a complete reload of the computer is the best course of action. A complete reload of the operating system wipes out ALL information on the computer and sets it back like the day you bought the computer.

You can read more about this virus and others at www.symantec.com