google is not everything !!
I find hits on each variant you listed via the VGREP-link, don’t you ?

did you clean the Temp-Int-files for EACH user ?
you probably get re-“infected” everytime you use your unsecured IE

disable activeX & scripting in IE, except for know secure sites

have you read all the VGREP-Links ?

This is Adware, so most conventional AV-scanner won’t detect it (yet)