ipconfig /flushdns, netsh int ip reset, Combofix, Hitman Pro, AVG, MS Security Essentials, hijack this, malwarebytes are all of the tools I've tried using to find and extinguish this virus. None of these tools found anything suspicious on the system. I eventually formatted the hard drive and reinstalled XP, which did not work either. I also rebuilt the master boot record and rewrote the partition table using the XP installation disk and testdisk. This did not help either. I booted up to Parted Magic, opened up the partition editor (Gparted), and noticed there was a little bit of space after the main partition that was unallocated. I resized the main partition to make use of this unallocated space. after I restarted the system, no more browser redirects! I brought the pc back to the owner, and it worked fine for one entire day. but now its back! could it be in the router , or might someone be specifically targeting my client?
Edited by Orange Blossom, 09 February 2011 - 11:10 PM.
Deactivate link. ~ OB