Since this forum auto-closes my browser when I try to post (not a good idea to piss off new users), I can't add to the knowledge store. This is in response to:http://www.bleepingcomputer.com/forums/new...d6530c5c7f.html
and I only hope someone using Bing (haha) and Google will find this topic.
The current version of the virus (2009 Dec 17) seems to be renamed into
in the following directory
C:\Program Files\Mozilla Firefox\components\
As suggested by BC's mods, taking a quick look at your FireFox's directory and seeing what files changed are a good start -- followed by some elective file surgery.
So far, the redirects are not occurring, but I've only removed the file about 10 minutes ago. I'll probably update this topic in 24 hrs.