Things had been pretty quiet for us on the virus front for the past year. Sure there was the occasional machine bogged down with garbage, but it was usually because someone did not keep their virus definitions updated, or worse, let their subscription expire.
Recently we have seen a rise in a new attack from a virus called XP Antispyware 2009. It starts with the user getting random popups that look like authentic XP messages telling you that your computer is not protected and you should download the software to correct it. Users are fooled because the pop up messages look just like other Microsoft windows and warnings. The virus quickly infects the machine to the point where the user receives constant popups and can no longer access the internet effectively. Attempts to download additional virus/ spyware scanner utilities are thwarted because the virus will not allow you to download the necessary definition files that will find and cure the infection.
We have see probably a dozen cases of this in just the past week. We have developed a "cocktail" of utilities that seem to do the trick; a serving of Trend Micro and AVG, with a dash of Spybot Search and Destroy, followed with a garnish of a new utility called Malwarebytes (the secret ingredient).
Even when these intrusions can be removed, they still present a significant disruption in productivity and money. On average, it costs about $175 to remove each instance of this virus. Combine that with the lost work time and you can quickly have a noticeable impact to the bottom line. It is important to remember you must always be aware when you are opening email or surfing the web. Never open emails from senders you don't recognize, and never click links to web sites you don't know.
If you do suspect you have a virus, notify someone immediately. Shut your computer off, or at least disconnect it from the network. The faster we can identify the virus, the easier it can be to remove. Waiting to notify someone only increases the risk of damage to your computer and significantly increases the risk of impacting other computers on the network.