From: "Li'l Abner" <blvstk@dogpatch.com>

>> That's the spirit :-)
>
> I got the necessary data files copied, but I couldn't find anything
> suspicious in the appdata folder.
>
> So I put the drive back in the laptop and booted up to the now activated
> Administrator account. Thanks to From The Rafters for that lead. From there
> I was able to clean it up. MBam, then SAS, then I could boot into the users
> account where I ran both those again. Uninstalled the already expired
> Norton IS, installed Avira, turned off System Restore, am running full scan
> with Avira now. And then will turn system restore back on!
>
> Thanks for your much respected advice as usual!
>
> That was one hell of a virus!
> ©I just Couldn't resist
>

Bwahahahahahahahas ;-)

BTW: %appdata%, %temp% are a couple of examples. I hoped you SERIOUSLY looked at the
MBAM & SAS logs to see WHERE the files were found so you can use that information in the
future.



--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp