Spyware Techie

Do you know what “Insecure Internet Activity. Threat of Virus Attack” popup is?

DESCRIPTION

The “Insecure Internet Activity. Threat of Virus Attack” popup is a fake security message from the rogue anti-spyware program WinSpywareProtect or the Zlob Trojan infection. Usually this type of Trojan infection roots from a fake video codec download that has the ability to install rogue anti-spyware programs onto your computer. WinSpywareProtect is just one rogue anti-spyware program that may display the Insecure Internet Activity or Threat of Virus Attack popup alert. If either message is clicked on it may result in you being redirected to a website to purchase a fake anti-spyware program.

Insecure Internet Activity. Threat of Virus Attack message reads similar to the following:

“Reported Insecure Browsing: Navigation blocked.
Insecure Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes.
Also insecure Internet activity can result in revealing your personal information.
To get full advanced real-time protection for PC and Internet activity, register WinSpywareProtect.
We recommend you to protect your PC now and continue safe Internet browsing.
Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended).”

Do you ever get this message? If so, then you may be infected with a Trojan or have a rogue anti-spyware program such as Antivirus2008, Antivirus2008 Pro or WinSpywareProtect installed on your computer.

We have noticed that the infection that causes the “Insecure Internet Activity. Threat of Virus Attack” message may change your time/clock settings to the 24-hour military time setting while displaying the text Virus Alert!

We recommend you using a method for removing this infection or rogue program from your computer immediately unless you like getting the “Insecure Internet Activity. Threat of Virus Attack” message plastered on your screen every 5 minutes.

“Insecure Internet Activity. Threat of Virus Attack” popup Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

1. Download and save SmitFraudFix to your desktop.
2. Restart your computer in Safe Mode (how to do safe mode). Once the
   desktop appears, double click on the SmitfraudFix.exe on your desktop.
3. After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
   press Enter to delete infect files.
4. SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
5. Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
6. SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
   file?’ Answer by typing Y (Yes) and hit Enter.
7. Reboot your computer to complete the cleaning process.
8. After reboot, a Notepad screen may appear containing a log of all the files
   removed from your computer. If it doesn’t appear, a file will be created called
   rapport.txt in the root of your drive, (Local Disk C:).
9. Restart your computer in Safe Mode (how to do safe mode).
10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
    click Yes to confirm that you want all the items to go to the Recycle Bin.
11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
    you want all the items to go to the Recycle Bin.
12. Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

“Insecure Internet Activity. Threat of Virus Attack” popup Manual Removal Instructions

This manual removal method is for techie computer users. “Insecure Internet Activity. Threat of Virus Attack” popup manual removal may be difficult and time consuming to remove. There’s no guarantee that “Insecure Internet Activity. Threat of Virus Attack” popup will be removed completely. So read the “Insecure Internet Activity. Threat of Virus Attack” popup removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

1. Uninstall “Insecure Internet Activity. Threat of Virus Attack” popup Program
   Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall “Insecure Internet Activity. Threat of Virus Attack” popup if found.
2. To stop “Insecure Internet Activity. Threat of Virus Attack” popup processes (view process removal steps)
   Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
   Search and stop these “Insecure Internet Activity. Threat of Virus Attack” popup processes:
   WinSpywareProtectSetup.exe
   WinSpywareProtect.exe
   For each unwanted process, right-click on it and then select “End task”.
3. To Unregister “Insecure Internet Activity. Threat of Virus Attack” popup DLLs (view DLL removal steps)
   Search and unregister these “Insecure Internet Activity. Threat of Virus Attack” popup DLLs:
   WinSpywareProtect1.dll
   WinSpywareProtect0.dll
   WinSpywareProtect3.dll
   
   To locate the “Insecure Internet Activity. Threat of Virus Attack” popup DLL path, go to Start > Search > All Files or Folders. Type “Insecure Internet Activity. Threat of Virus Attack” popup and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
   Once you have the “Insecure Internet Activity. Threat of Virus Attack” popup DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
   To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
4. If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
5. To unregister “Insecure Internet Activity. Threat of Virus Attack” popup registry keys (view registry keys removal steps)
   Go to Start > Run > type regedit > press OK.
   Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
   Search and delete these “Insecure Internet Activity. Threat of Virus Attack” popup registry keys:

   HKEY_LOCAL_MACHINE\SOFTWARE\WinSpywareProtect
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinSpywareProtect
   

6. Remove “Insecure Internet Activity. Threat of Virus Attack” popup Directories.
   To find “Insecure Internet Activity. Threat of Virus Attack” popup directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
   Search and delete the following “Insecure Internet Activity. Threat of Virus Attack” popup directories:
   %ProgramFiles%\WinSpywareProtect
   C:\ProgramFiles\WinSpywareProtect
   %SystemRoot%\samples\WinSpywareProtectSetup.exe
   
   Right-click on the “Insecure Internet Activity. Threat of Virus Attack” popup folder and select Delete.
   A message will appear saying ‘Are you sure you want to remove the folder “Insecure Internet Activity. Threat of Virus Attack” popup and move all its contents to the Recycle Bin?’, click Yes.
   Another message will appear saying ‘Renaming, moving or deleting “Insecure Internet Activity. Threat of Virus Attack” popup could make some programs not work. Are you sure you want to do this?’, click Yes.
7. To remove “Insecure Internet Activity. Threat of Virus Attack” popup icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the “Insecure Internet Activity. Threat of Virus Attack” popup manual removal instructions!
I hope this article has helped you solve your “Insecure Internet Activity. Threat of Virus Attack” popup problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that “Insecure Internet Activity. Threat of Virus Attack” popup will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

Did You Find this Article Helpful?

Subscribe to Spyware Techie for more!

Or get latest articles to your via email:

Read Other Random Posts

• IEAntiVirus 3.3 Removal Guide
• AntiSpyBoss or AntiSpywareBoss Removal Guide
• Detect and Bypass Keyloggers on Public Computers
• US Army Banning USB Drives Due To Worm Threat