ClickRight
Member
- Reaction score
- 18
- Location
- BC, Canada
I'm in a hurry so I'll try and keep this short while giving the necessary details.
I have a clients PC (Vista SP2) in for a virus removal. The only noticeable symptom is web page redirecting in IE and Firefox. We have run it through the usual MBAM, Super Anti-Spyware, and full offline scans using Dr. Web and Norman Malware cleaner. None of these scans pick up anything, the only scanner that picks up anything at all is Combofix, which reports that explorer.exe and userinit.exe are infected. If I upload those files to virus total, they will confirm the infection, but just give it a generic name (Trojan.Packer I believe)
Even if I replace those files with clean versions and reboot, the virus comes back. Has anyone seen this before -- any thoughts or suggestions?
I have a clients PC (Vista SP2) in for a virus removal. The only noticeable symptom is web page redirecting in IE and Firefox. We have run it through the usual MBAM, Super Anti-Spyware, and full offline scans using Dr. Web and Norman Malware cleaner. None of these scans pick up anything, the only scanner that picks up anything at all is Combofix, which reports that explorer.exe and userinit.exe are infected. If I upload those files to virus total, they will confirm the infection, but just give it a generic name (Trojan.Packer I believe)
Even if I replace those files with clean versions and reboot, the virus comes back. Has anyone seen this before -- any thoughts or suggestions?