Here's a list of tools I found very important to have.

• Spybot - remove the majority of malware (90% of the work)
• Hijackthis - remove the leftover malware manually (9% of the work)
• Knoppix

Here's a short overview of what I did to get rid of the .... branded spyware.

Boot knoppix using: expert26 lang=be Then:

su -
mount -o rw,nls=utf8 /dev/hda1 /mnt/hda1
cd /mnt/hda1/WINDOWS/system32/
find . -name "*.dll" -size +225k -size -235k -exec md5sum {} \;
find . -name "*.dll" -size +225k -size -235k -exec md5sum {} \; | grep 71f1b29f7e6c6331e2e8209a3ffcbdf4
find . -name "*.dll" -size +225k -size -235k -exec md5sum {} \; | grep 71f1b29f7e6c6331e2e8209a3ffcbdf4 | cut -f3 -d' '
find . -name "*.dll" -size +225k -size -235k -exec md5sum {} \; | grep 71f1b29f7e6c6331e2e8209a3ffcbdf4 | cut -f3 -d' ' | xargs rm -f