|
Where were you surfing? I caught the same shit yesterday.
Quick fix: regedit, search for "approvedlinks", then delete all records found. Then change the home page manually.
Also there were two exes in the windows folder, around 30k each, they're not hidden - sort the folder by date and look for the date when your browser's got infected.
Or perhaps it refreshes daily, check today's date too.
Adaware didn't remove it.
|