[lentulusgracchus]

Could you give us details on the virus the hacker left?

Was it something not covered by recent definition files from Norman, McAfee, Norton, CA, Grisoft, Sophos, etc.?

And was it a straight virus, or a Trojan?

[ccurrie]

http://www.sophos.com/virusinfo/analyses/jspsymean.html

The virus was downloaded from http://underground.ae21vek.ru/Windows-KB833987-x86.exe (it is safe to download the file and see if your virus scanner detects it, but DO NOT browse the index.html at the root of that site if you are using MS Explorer)