Comment My preferred removal Technique (Score 1) 334
We remove the infected hard drive, then scan it on a linux box using five different AntiVirus/Spyware programs. Then we boot in safe mode back on the original machine and scan it as a running system. Some of the new virus / spyware programs are actually running the installed avg within a wrapper and not allowing them avg to see the whole hard drive. Really pretty well written if they could have gone unobserved.