htepo sets your homepage to htepo.com and you're not able to change it. In addition to a yellow warning triangle in the system tray for savetheinformation, Online Security Guide, and/or Live Safety Center. It also servers pop-up ads, and adds Security Tool Bar 7.1 to Internet Explorer.

Option 1: Atribune's VundoFix removal tool should remove this infection...

Please download VundoFix.exe to your desktop

1. Double-click VundoFix.exe to run it.
2. Click the Scan for Vundo button.
3. Once it's done scanning, click the Remove Vundo button.
4. You will receive a prompt asking if you want to remove the files, click YES
5. Once you click yes, your desktop will go blank as it starts removing Vundo.
6. When completed, it will prompt that it will reboot your computer, click OK.
7. Please save the contents of C:\vundofix.txt in case the infection is not removed, it will need to be posted with your HijackThis log in the malware forum.

Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

If the infection(s) are still present, please post the contents of C:\vundofix.txt and a HiJackThis log in the Malware Removal Forum.

Have you've found the VundoFix removal tool useful? Please consider a donation to the author: Atribune.org.

Option 2: sUBs combofix

1. Download ComboFix from here, and save it to your desktop.
   If you have used Combofix before, please delete it and re-download again. Combofix is being updated daily.
   In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix, please disable your scanner and redownload Combofix again. Because some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.
   
2. Doubleclick combofix.exe
   1. Follow the prompts.
   2. Don't click on the window while the fix is running, because that will cause your system to hang.
   3. In case you see a sed.cfexe error with the option to send a report or not, choose "don't send".
3. When finished and after reboot (in case it rebooted), combofix will open again to gather the necessary information for the log. This may take a bit. When done, Combofix will close and a log should open, combofix.txt. Save the log in case you're still infected. if the infection is still present, post this log and a HiJackThis log in the Malware Removal Forum.

=====================================================================
This is a self-help guide. Use at your own risk.

Important Note: If you need assistance, please start a new topic in our Malware Removal Forum. This topic is also open for comments, but not all will receive a reply.