One of my users got her laptop infected by DProtect Online Agent. This seems to be very similar to the FBI and SpamHouse viruses, but I didn't have the "luck" to deal with those before...
I restarted in Safe Mode and restored the PC to an earlier point this week, I looked and disabled Suspicious looking Startup Items, restarted and it all seemed good...
Except:
This virus renamed EVERY SINGLE File in her Documents Folder and and added the extension .html to them. when renaming the file back manually they all seem to corrupt.
Anyone has a better way to get rid of the unwanted .html file extension?