I remember using a Trojan detector back in the days to clean up 3 infections for friends: subnet and sub7 and a variant of beast.
Cant really find the name of the app now as it has been many years but I recall at the time not even systemworks was able to fully detect and clean it.
(good old days of cleaning services, with 52k connection and a P1 or P2 processor...)