The key would be the manual removal of the offending components. I don't think that it's that hard to make a list and just delete the offending components, starting with the dll files first, if it will let you. Maybe the renaming of the files changed should come first, takes a few minutes to actually find out if that works. Once you are there though, and you cripple the trojan's payload, going after the rest is a piece of cake.
Bookmarks