From: "Geo" 

"Mike N."  wrote in message
news:1e2iu052kttgo27tkg8qik32oshivl5fk5{at}4ax.com...

>    What about booting from BartPE and scanning with FPROT?  Then
disconnect
> from the internet and remove all reg entries and BHOs that might force it
> back.   This has worked for me for the latest round of stealth viruses.

I haven't tried booting something other than the installed OS to remove it.
Once I started reading I found a couple papers that claim it really screws
up the security/integrity of the infected system so at that point I decided
the kid needed to reinstall.

--- BBBS/NT v4.01 Flag-5