Report Offensive Message

Yup this is why we end up charging for several hour's work.
I also would not claim to be an expert, a "competent jobber" maybe.
Infections are almost always a "hunting expedition". Especially as most infections do not advertise themselves as clearly as ???My Security Shield???.
So the steps of :-
1. Identification, (may require scanning with a number of different tools).
2 Researching a number of solutions, as typically, as you found, they do not all work out as well as described.
3. Implementation of a fix that does work.
4. Test/scan that there are no other remnants left.
If you can get this done in 2 hours you have done well!

Investigations of how it got in are rarely productive or commercially justifiable. Especially when "clients" and especially teenagers are not always forthcoming with the important damming information. happy

Further suggestion:- concentrate on the immediate problem, (the homework) extract and print off the file in its current state. Then introduce the client to a reliable, fall-back document production technology developed a few years ago, called a PEN!
(Sorry been there done that!)
Posted by gdburton@...
22nd Mar 2012