[jeffc]

Once installed it turns off Windows Automatic Update and stops you using the Windows Security Centre. It disables a range of internal services that could be used by anti-malware programs, blocks access to a number of anti-virus websites and even resets and deletes system restore points so you can't go back to an uninfected installation of your operating system

I've seen it. Nasty piece of software. I helped quite a few people recover from it.

[JoeProBono]

“I helped quite a few people recover from it.”

How so?

[Knitebane]

I helped quite a few people recover from it.

If you didn't format the machine and install from read-only media, you probably didn't help them all that much.

Industry best practice is to format and re-install:

Why do I have to format and reinstall Windows after my computer is infected with a virus?

[Smedley]

One of the reasons I surf only using a cheap spare IBM laptop with absolutely no personal data - not even email.

I keep a list of all permissable processes, keep my anti-spyware going and never less than medium security.

[TChris]

I've seen it. Nasty piece of software. I helped quite a few people recover from it.

What's the trick? I haven't had to clean any users of this one yet, but I'm sure the day is coming.

I recently found one that I couldn't remove and had to just reload the workstation. I don't like losing. >:-(