I have discovered that our network at our store has become infected with trojan horse named system.exe. It starts a process called system at boot up, even in safe mode and if you attempt to stop or close it, it will reboot the pc. To make matters worse it broadcasts over your network, wired or wireless. It sits in HKLM/SOFTWARE/Microsoft/Windows/Currenten Version/Run/HBSecure32 (value is SYSTEM.EXE with no path). When you attempt to delete or modify it, I assume the process named "system" in task manager adds a new one. I installed NIS 2009 on this machine and it found several other dangerous spywares and trojans but failed to remove the one (SYSTEM.EXE) which is broadcasting and infecting all other pc's. If anyone has any suggestions it would be greatly appreciated.
Matt