I may have been hit by the Coreflood.B virus. In any case, I now have problems accessing the following files: netstat.exe, regedit32.exe, and regedit.exe. These files do not appear in windows explorer and windows cannot find them. Oddly enough, if I reboot into recovery console or safe mode the files are exactly where they should be - clearly present and active. I renamed regedit.exe to regedit.com and also a copy to regfix.com. Upon reboot I can -only- see regfix.com How do I regain access to these "spoofed" files? How is this exploit done? I need to reverse it.

http://www.symantec.com/avcenter/venc/data/backdoor.coreflood.b.html follow the removal instructions, at the above url.

and someone in the microsoft.security newsgroup said to try the trial version of http://www.anti-trojan.net/en/download.aspx

Thank you for the sound advice. Unfortunately, stopping and deleting this trojan is just step 1. Now I need to regain access to the files that are no longer visible, but which exist on my machine. Any suggestions? How can regedit.exe exist in the proper location but be invisible to the Admin account???