A userinit hijack was left on a laptop after a Malwarebytes clean & then a Prevx clean. I had to use Combofix to clean it. It was a definite infection, being picked up by HijackThis & it was continually changing the IE homepage & search defaults as well as making bootup very slow. I'm a little concerned why did Prevx not see this infection?
Hello, It's hard to say without further information - could you get a scan log from this user's PC or a copy of any samples if they still have them? Thanks!
Sorry Joe, it's an end user pc. I was just surprised that Prevx didn't pick it up when it was glaringly obvious in HijackThis.
