Thanks, I have had one, maybe two occasions to use the restore feature in Windows. If memory serves it was because I did something quite stupid.

I have since learned the nasty I had came from a trusted server I accessed with the FTP program in my WYSIWIG app.

The admins of that particular network had about ten litters of kittens at that revelation, and have since told me they are isolating individual systems and reformating/reloading just I had to do. It’s giving them a magnum sized headache. Seems it’s a very persistent little bastard.

Whoever wrote it was good, it's damned small, well concealed and almost pure assembly code. Which I couldn't read if you sat there and told me how.