My internet explorer was re-directed to http://www.0749.com. I removed a few links in registry like: “…iexplore.exe” http://www.0749.com. Then I started IE, it was redirected to 13721.net instead. I deleted everything I found in registry about this address. But it still did that.
I have Norton Antivirus, but it can’t detect anything.
Finally, I found a suspicous file in the IE folder: 1802120223.dat. I changed the name. Then the problem was gone. Obviously, this file is called by IE, which is marked in registry.
Then I found a key in registry:
If I remove this key and have the file there, there won’t be any problem either.
That’s why people can’t recognize. But the antivirus software is supposed to recognize it.