Seb7 - 4:58 pm on Jan 5, 2010 (gmt 0)

I've managed to fix 3 variations of this in the last two weeks, really freaks the users out! The virus were all installed in the apps directory and appeared to have completely trashed the system, but it hadn’t, it creates a number of hooks into the system as to throw up the fake 'virus warming' messages when ever you do anything.

Doesn’t disable all types of anti-viruses and safe mode did still work on one machine.(f8 while booting). The trick is to get your normal anti-virus running again, updated, and running a complete scan. AVG did the job each time.

Once the virus is removed, the system will almost go completely back to normal, except for some settings still left in the browser. So recommend using the reset all button in the browser settings which should remove any unnecessary proxy settings and return the browser security level back to a normal level.