Insecure Internet Activity. Threat of Virus Attack popup Removal Guide

Do you know what "Insecure Internet Activity. Threat of Virus Attack" popup is?

The "Insecure Internet Activity. Threat of Virus Attack" popup is a fake security message from the rogue anti-spyware program WinSpywareProtect or the Zlob Trojan infection. Usually this type of Trojan infection roots from a fake video codec download that has the ability to install rogue anti-spyware programs onto your computer. WinSpywareProtect is just one rogue anti-spyware program that may display the Insecure Internet Activity or Threat of Virus Attack popup alert. If either message is clicked on it may result in you being redirected to a website to purchase a fake anti-spyware program.

Insecure Internet Activity. Threat of Virus Attack message reads similar to the following:

"Reported Insecure Browsing: Navigation blocked.
Insecure Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes.
Also insecure Internet activity can result in revealing your personal information.
To get full advanced real-time protection for PC and Internet activity, register WinSpywareProtect.
We recommend you to protect your PC now and continue safe Internet browsing.
Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended)."

Do you ever get this message? If so, then you may be infected with a Trojan or have a rogue anti-spyware program such as Antivirus2008, Antivirus2008 Pro or WinSpywareProtect installed on your computer.

We have noticed that the infection that causes the "Insecure Internet Activity. Threat of Virus Attack" message may change your time/clock settings to the 24-hour military time setting while displaying the text Virus Alert!

We recommend you using a method for removing this infection or rogue program from your computer immediately unless you like getting the "Insecure Internet Activity. Threat of Virus Attack" message plastered on your screen every 5 minutes.

"Insecure Internet Activity. Threat of Virus Attack" popup Automatic Removal Instructions

"Insecure Internet Activity. Threat of Virus Attack" popup Manual Removal Instructions

This manual removal method is for techie computer users. "Insecure Internet Activity. Threat of Virus Attack" popup manual removal may be difficult and time consuming to remove. There's no guarantee that "Insecure Internet Activity. Threat of Virus Attack" popup will be removed completely. So read the "Insecure Internet Activity. Threat of Virus Attack" popup removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

  1. Uninstall "Insecure Internet Activity. Threat of Virus Attack" popup Program
    Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall "Insecure Internet Activity. Threat of Virus Attack" popup if found.
  2. To stop "Insecure Internet Activity. Threat of Virus Attack" popup processes (view process removal steps)
    Go to Start > Run > type taskmgr. The click the Processes tab and you'll see a list of running processes.
    Search and stop these "Insecure Internet Activity. Threat of Virus Attack" popup processes:
    WinSpywareProtectSetup.exe
    WinSpywareProtect.exe
    For each unwanted process, right-click on it and then select "End task".
  3. To Unregister "Insecure Internet Activity. Threat of Virus Attack" popup DLLs (view DLL removal steps)
    Search and unregister these "Insecure Internet Activity. Threat of Virus Attack" popup DLLs:
    WinSpywareProtect1.dll
    WinSpywareProtect0.dll
    WinSpywareProtect3.dll

    To locate the "Insecure Internet Activity. Threat of Virus Attack" popup DLL path, go to Start > Search > All Files or Folders. Type "Insecure Internet Activity. Threat of Virus Attack" popup and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
    Once you have the "Insecure Internet Activity. Threat of Virus Attack" popup DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
    To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
  4. If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
  5. To unregister "Insecure Internet Activity. Threat of Virus Attack" popup registry keys (view registry keys removal steps)
    Go to Start > Run > type regedit > press OK.
    Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
    Search and delete these "Insecure Internet Activity. Threat of Virus Attack" popup registry keys:
  6. Remove "Insecure Internet Activity. Threat of Virus Attack" popup Directories.
    To find "Insecure Internet Activity. Threat of Virus Attack" popup directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
    Search and delete the following "Insecure Internet Activity. Threat of Virus Attack" popup directories:
    %ProgramFiles%\WinSpywareProtect
    C:\ProgramFiles\WinSpywareProtect
    %SystemRoot%\samples\WinSpywareProtectSetup.exe

    Right-click on the "Insecure Internet Activity. Threat of Virus Attack" popup folder and select Delete.
    A message will appear saying 'Are you sure you want to remove the folder "Insecure Internet Activity. Threat of Virus Attack" popup and move all its contents to the Recycle Bin?', click Yes.
    Another message will appear saying 'Renaming, moving or deleting "Insecure Internet Activity. Threat of Virus Attack" popup could make some programs not work. Are you sure you want to do this?', click Yes.
  7. To remove "Insecure Internet Activity. Threat of Virus Attack" popup icons on your Desktop, drag and drop them to the Recycle Bin.

You've completed the "Insecure Internet Activity. Threat of Virus Attack" popup manual removal instructions!
I hope this article has helped you solve your "Insecure Internet Activity. Threat of Virus Attack" popup problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There's no guarantee that "Insecure Internet Activity. Threat of Virus Attack" popup will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

Tags: .
  • Nacho

    i followed all the steps bellow but i didnt find any of the files and processes that you mention. however, the malware is still in my pc.
    i will aprecciate your help. thanks

  • nobody

    if you're using firefox 3, use tools - add-ons - extensions to remove untrusted part that might be causing this.

  • NoamS

    Same as Nacho, I have been infected with this mal-ware... The funny thing is - that at first, the computer was super slow, and IE 7 was infected with all sorts of antivirus crap... I quickly ran an Ad-Aware SE Pro full system scan, which - 2 hours later - resulted in about 30 SEVERE level 8-10 malware and trojan objects.

    My nod32 antivirus system found 0 infected files after the Ad-Aware search. In the morning, the computer was fast and as quick as normal - until I opened Internet Explorer 7 - then I saw all the SAME infections, but the computer was still not slow.

    I have looked at all the sites that say the same as you do - and I tried all the manual file removals. Neither Ad-Aware, Nod32, or my manual system searches find ANY bad files at all!

    Please help! My computer is still infected, but I can't find ANY files to remove, with any anti spyware software I try!

  • Steven

    Worked perfectly!

    Description of issue:
    Any Activex control (we use one to initiate a VPN for work) would launch the "Insecure Internet Activity" crap.

    Steps to fix:

    First I ran thorough searches with SpyBot and Adaware -

    Then...

    1. Reboot into safe mode
    2. Execute Smitfraud.exe
    3. Type 2 for 'clean (safe mode recommended)
    4. This lasts a while, eventually starts disk-cleanup....when it finishes hit 'Y (Yes) and hit Enter' to check the Registry
    5. After completion, a text file appeared via notepad with a log of changes/searches. In the author's steps, this should occur only after rebooting (step 5), fixing wininet.dll (step 6), Rebooting again (step 7). I rebooted anyway (into safe mode), and nothing occurred.
    6. I then went through the manual process, and found no issues - which indicated to me that the automatic process seemed to work effectively.
    7. Upon another reboot, I was able to run Activex controls without spyware intervention.

    Thanks!

    P.S. Use Firefox!

  • hxxl

    Same, same , same.. Nothing works.. This was not helpfull..

  • anonymous

    Is it necessary that we go through these steps to delete the trojan?? Or would it work to get an anti spyware to clear them out?

    Thanks!

  • i hate insecure internet activity

    i hate this how will it work this sucks plz help me!!!!!!!!!!!!!!!!!!!!!!!!

  • cvjetko

    For me worked perfectly for me.
    Many thanks!

  • jb

    Thank for this posting, I believe it has worked.

    The instruction are a bit off from the sequence but it was still easy to follow!

    Thanks again

  • guest

    superb. worked fine. Thanks alot. But, I still see the logo in the address bar. It is not giving any error message.

  • gary

    I have tried Malawarebytes anti-malware; McAfee; Super AntiSpyware and others, still can't get rid of this thing.

  • sward

    got the virus the other night - so what's the point in Norton I must ask????

    followed the instructions for auto removal (i.e the lazy way) & glad to report that all seems cleared. Had removed some bits of the virus manually in safe mode prior using the website although was still getting the annoying pop ups.

    Anyway, thanks a lot, thought I had buggered up the daughters computer.

    Vista operating system - instructions pretty good although at step 5 the notepad screen appeared (step 8) so just rebooted & all was good. So far anyway....

  • lknlkhnl

    horriable it sucks

  • skeem

    Cant find on desk top in SAFEMODE. I followed the instructions precisely and nothing is working....HELP ME PLEASE!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

  • Dan

    Why is this Smitfraud listed as a virus, and you have it here to download??? I tried to download it, McAfee caught it, and then I look it up and there are people complaining it is a trojan... WTF dude?!

  • Valentino

    Dan,

    “Smitfraud” is a type of infection that the smitfraudfix program is programmed to remove. “Smitfraudfix” is not a virus. The application has that name just to clarify that it is an application designed to “fix” issues caused from the smitfraud type of infections which many rogue anti-spyware programs are classified as. Please read about the rogue called “Smitfraud fix tool” which is an illegitimate application: http://www.spyware-techie.com/smitfraud-fix-tool-removal-guide-and-information/. “Smitfraudfix” is a free and legitimate tool that we suggest usage for removal of several types of rogue anti-spyware parasites.

  • ted

    This one killed my MacAfee.
    SmitfraudFix.exe disabled it in single mode but when start nomal it regenerated. I've installed Malwarebytes Anti-Malware and MV RegClean but did not help. It attached to IE and Firefox. I had to use Google Chrome to research and download soft. Finally, installed Kaspersky Anti-Virus 6.0 and found these. Also had to reinstall IE7 and IE8 and all updates. Good luck.
    -----------
    found: Trojan program Trojan.Win32.FraudPack.stu File: C:\Documents and Settings\my_name\Application Data\Gmail\Shell32.dll
    found: Trojan program Trojan.Win32.FraudPack.stu File: C:\System Volume Information\_restore{674EB19F-1FEF-4ABB-9983-F52A50DFD789}\RP879\A0156978.dll
    found: Trojan program Trojan.Win32.FraudPack.stu File: C:\System Volume Information\_restore{674EB19F-1FEF-4ABB-9983-F52A50DFD789}\RP879\A0159527.dll
    Trojan program Trojan.Win32.FraudPack.stu File: C:\System Volume Information\_restore{674EB19F-1FEF-4ABB-9983-F52A50DFD789}\RP879\A0162737.dll
    found: Trojan program Trojan.Win32.FraudPack.stu File: C:\System Volume Information\_restore{674EB19F-1FEF-4ABB-9983-F52A50DFD789}\RP880\A0164452.dll
    found: Trojan program Trojan.Win32.FraudPack.stu File: C:\System Volume Information\_restore{674EB19F-1FEF-4ABB-9983-F52A50DFD789}\RP881\A0164468.dll

  • insia jaffary

    the steps r 2 informative 4 evry1.....if any1 want 2 knw den come 2 dis website....plzzz reach as quick as u can cx itx ur pc's problem nd u hav 2 solve it dearxxx....!!!!!