gotrootdude
Thread Starter
- Joined
- Feb 19, 2003
- Messages
- 8,812
Recently, I came across a couple of PC's that could not access the internet through IE. What tipped me off that it was a varient of Searchv was that the search entries had been changed to searchv. When I ran Hijackthis, nothing else except the search entries had been added. I searched both PC's for winshow.dll and winlink.dll, but neither file could be found. Nothing showed up abnormally in the process manager, in the registry, in procrecon, adaware, or spybot.
The only way to repair the machines was to fix the search page change, and to clear the internet cache. So, a file must have been hiding out in the internet cache, although it was completely hidden among the running processes.
If anyone else has experienced this, please respond. Maybe we can find the culprit and get a sample for spyware companies to analyse..
The only way to repair the machines was to fix the search page change, and to clear the internet cache. So, a file must have been hiding out in the internet cache, although it was completely hidden among the running processes.
If anyone else has experienced this, please respond. Maybe we can find the culprit and get a sample for spyware companies to analyse..
