I do not need a solution (just sharing information)
Please read the following new Security Community blog post if you encounter W32.Tempedreve. This threat is difficult to eradicate without admin action, but once it is understood and approached with the documented tool and procedure, it can be overcome.
Support Perspective and Battleplan - W32.Tempedreve
https://www-secure.symantec.com/connect/blogs/support-perspective-and-battleplan-w32tempedreve
A new variant has been seen in the wild recently- W32.Tempedreve.E!inf
With thanks and best regards,
Mick