I depend heavily on information I trace on the net to present the manual malware removal instructions I present to them victims in the virus and worms, www.prevx.com/filenames is also an important source, as there are other sites to find this information. Also good to check against automatic malware removal to see every malicious file, process or registry entry has left the infected OS,