Link to http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=200035&messageID=2148455
Frankly when such a bomb goes off you often have to wipe and reinstall or at least reinstall or do the repair install of the OS.
I recently was wanting to download some things off BitComet. I normally go to isohunt.com to get my torrent files, but I heard about torrentspy.com and I wanted to see if they had better downloads.
The first thing that hit me was, my Norton Anti-Virus popping up and saying it detected the spyware program ErrorSafe. I scanned with Norton Anti-Virus, Spybot, Ad-aware, Spyware Doctor, and Windows Defender. They all found different parts of ErrorSafe and deleted them. But what I was confused about, is that NAV didn't find it again, but instead found a 'trojan horse' that didnt have a specific name. It infected my svchost.exe file! It cannot repair it, and it is currently in quarantine. I was wondering if I should delete this file, but i'm pretty sure it's important. NAV rates this threat as high, and i've sent it into Symantec to get checked out, and find a way to fix it, but they haven't emailed back!