I'm almost there, but stuck with
Documents and Settings\xxxxxx\Application Data\drivers\downld (Worm.Bagle). (A classic signature)
I can delete the folder, but on reboot it reappears. Everthing else has gone (I think!). I'll give the Kaspersky routine a blast today. B***s hiding somewhere!
EDIT:
I will post the link to the reg safe boot 'restore keys' in the sticky. Despite all, I still cannot use system restore - it goes right through the process and then says 'fail'.
I still have backed up reg files from before the 'invasion' - is there any merit in restoring these and if so which?
Last edited by BOAC; 24th Oct 2009 at 08:16.