He was more attracted to her wallet, or purse whichever is more appropriate
I could see that being attractive.
Did you see my post on this and how it creates a replicating .dll in the Sys32 folder?
The problem we had was that it also disabled all the spyware programs, like Spybot, Hijackthis AND it disabled System Restore, so you couldn't even do a restore to get out of it.
Eventually, we just reformatted those two machines.