That particular bug is a supreme pain in the ass. It houses itself in the main browser, creates a back-up for default, and even the space for a new one. Simply pulling up Internet Options from Control Panel and 'right clicking delete' don't mean shit to this hijacker. You have to use Ad-Aware SE or something like it and the trick is to do it OFFLINE!!!!!! If you are still online, this sumbitch will find places to hide no matter what. When you are offline, you can isolate the components and it cannot send out for "reinforcements." I spent a whole damn Saturday afternoon one time chasing this little fucker out of my system before I realized it had replicated itself 27 times, 3 times for every time I had re-started the PC.
I think that the main trick is not to restart your PC. This Trojan even has a fake window that pops up when you are about to kick it's ass that looks real official and say's "what do you want the computer to do?" Just ignore the bitch and hit alt + F4, finish what you are doing and when you close out of Ad Aware or whatever, shut the whole PC down. REMEMBER TO TURN ON YOUR MODEM, RE-ATTACH THE PHONE CORD, CABLE OR WHATEVER YOUR CONNECTION BEFORE RE-STARTING!!!!
After you power back up, do another scan while online just to make sure, but it is a good idea to set security way up on the fire-wall and Block every new connection request coming in until you know what it is and where it comes from. I use Lava-Soft Ad AwareSE and Agnitum Outpost Firewall as well as Grisoft's AVG Virus Protection. All of these programs are currently free. Hope this was some help.
