|Our IT guys have about 250 computers, use Norton's Corporate Edition newest version and have the same problem. The local ITT's have ask me to help them on a few occasions but the corp. guys don't want the help and refuse to grasp the fact that they run a 5.6 version of java running that is so out-of date (6.18 newest version) and is known to be one of the major portals for the redirect virus to access a computer...all you can do is try, its their grief.|
We also have the "big red hand" (don't know the vendor) internet protection that keys off of words and will block most chat rooms, porn sites, p2p sites, etc. that these baddies linger in but still the infection continue.
Another common IT practice at our facility is to prevent access to internet options which prevents the users from deleting history, temp files and cookies which as you know is where at least one file is always stored.
None of which help, it is most likely java. For the last few days we have been getting the "IRS scam" through user emails...best of luck.
P.S. our users have found out that they can unplug the cat 5 wire from the T6 internet connection, restart the computer and bypass some restricted access policies.