Swamped with virus warning pop-ups

hp compaq nx9005
November 4, 2007 at 13:06:59
Specs: Windows XP Prof 2002 SP2, mobile AMD Athlon(tm) XP2
Can anyone help, I've got pop-ups warning of malware and a redirected Internet Explorer home page.

Frequent pop-up warnings that my computer is infected with, eg Spyware.Cyberlog-X.

Plus warning balloons coming from a yellow triangle with an ! in from the task bar, eg:
"Security Alert: NetWorm-i.Virus@fp" instructing to click the balloon to download Antivirus software.

Also repeatedly fires up an explorer window on its own with a 'System Security Caution" window pointing at "www.savetheinformation.com", warning that a Trojan TJ/BZ infection attempt was detected.

Some of these pop-ups and warnings still occur even when booted in safe mode.

On opening, Explorer automatically redirects to "http://htepo.com".

Any help would be greatly appreciated.

thanks in advance


See More: Swamped with virus warning pop-ups

Report •

November 4, 2007 at 13:32:04
First clear your cookies and files in Internet Explorer under Tools> Internet options. Then download and run after updating - Adaware 2007 and Spybot Search & Destroy. Find them below. You are probably infected with Spyware/ malware. Don't download the program the popups are directing you to.


Report •

November 5, 2007 at 03:35:26
Also remember, if those pop-ups did not come from a trusted application service such as your OS or Anti-Virus protection; its actually a form of adware that lures people into buying software.

Adware is of no real threat but gets anoying.

A solution: Start> RUN > msconfig

Under the services tab, disable the adware.
How you identify what is adware is beyond the scope of msconfig.

Report •

November 5, 2007 at 14:14:05
Thanks OtheHill,

Ran Adaware and SpyBot. Lots of things found and fixed.

Most of what Spybot deleted stayed deleted, except for:
which keep coming back.

Pop-ups and redirected home page still happening though.

Any ideas what else I can try?


Report •

Related Solutions

November 5, 2007 at 14:26:23

When using Spybot you should use the Immunize function. It is confusing to use. After the scan is done you click on the immunize button on the left. A screen will come up stating how many things are blocked and how many more can be blocked. Then click on the green cross at the top.

This block the sites that loaded the malware on your computer. It shouldn't come back after you do that.

Report •

November 5, 2007 at 15:58:17

Did the Immunize thing and scanned again (twice!) but Virtumonde.generic and Win32.BHO.df still reappear each time.

Is this perhaps a virus or something which is not as easy to delete as Adware?


Report •

November 5, 2007 at 16:01:53
Try turning off system restore, delete cookies and temp files in IE and empty the recycle bin. Then boot to Safe mode and run Spybot again.

Remember to enable system restore again after fixing things.

Report •

November 6, 2007 at 12:24:48
OK. Done it all in Safe mode.

Pop-ups still apperaing and home page still getting diverted.

Anything else I can do?


Report •

November 6, 2007 at 12:38:37
Try this fix for Virtumonde.generic.

And here for Win32.BHO.df

Report •

Ask Question