I-worm locksky

I posted this on the software side, but thought I'd better post it over here because it may help someone else.

I received 5 suspicious e-mails from someone I knew with the subject line of "your account has been suspended" and stupidly opened the attachment. The attachment was this file: acc_info9.exe. It is the I-worm / locksky, locksky.aa, I-worm/locksy.aa worm. After AVG tried to erase it, it would recur after a reboot. I've found where the virus/worm places itself. It is under the c:\windows\system32\ and calls itself "sachostc.exe, sachostp.exe, sachosts.exe and sachostw.exe". Once I removed these files from my registry the madness stopped.

I hope this helps someone. I've been at this all day.