Once a machine has been rooted by an attacker, IMO the least-bad option is to just nuke it and start from scratch. For all I know, the tools I want to use to fe

Once a machine has been rooted by an attacker, IMO the least-bad option is to just nuke it and start from scratch. For all I know, the tools I want to use to ferret out the infection are also infected. When the attacker is Microsoft, the situation seems pretty hopeless.