My son started playing online games in my laptop. I had VIPRE antivirus with web defense activated, so I thought I could not get an infection, well it happened.
Symptoms: When I open IE, and write an address of a site, it gets redirected to a searchtext.pro/dori page. Then, in IE, Firefox and Chrome, at first load, when I load a page, any click I do opens a new window with an address onclkds.com/?zoneid=
First, I downloaded Malwarebytes and ran it, it discovered PUP.Optional.Spigot, which I removed. But the problem was still there. Then I tried with other malware scanners: Zemana.AntiMalware, hitmanpro, adwcleaner, Adware Removal Tool by TSA, Bitdefender antimalware, SUPERAntiSpyware, JRT, Karspersky, msert, Spybot, grind, 360 Security. NOTHING. None of them discovers any malware. Well, Grind discovered a registry entry for RMPL.Shopper, and SUPERAntiSpyware encountered traces of Scorpion.
Manually cleaning: I checked and there are no suspicious installs, no addons, I did a reset of all three browsers, I even reinstalled from scratch Firefox, I checked services, running processes, startup apps, checked on regedit… NOTHING.