ChasVircio
2013-01-22, 23:09
This was picked up by a friend last week.
Bombed it with Spybot, MWB and SuperAnti in regular and safe mode and it appeared to have cleaned up.
However, every time we reboot the "Search Here" reappears on browsers (IE, FireFox, Chrome).
Used RogueKiller and it didn't turn up any of the usual evidence listed on the myriad postings for this nasty.
The virus does NOT do it's thing in Safe Mode, so something in the regular boot process is contaminated - but nothing is detecting it.
Bombed it with Spybot, MWB and SuperAnti in regular and safe mode and it appeared to have cleaned up.
However, every time we reboot the "Search Here" reappears on browsers (IE, FireFox, Chrome).
Used RogueKiller and it didn't turn up any of the usual evidence listed on the myriad postings for this nasty.
The virus does NOT do it's thing in Safe Mode, so something in the regular boot process is contaminated - but nothing is detecting it.