It appears that I managed to acquire a new version of the Tdss rootkit. The article describes a slightly older version. The newer one is no doubt nastier.
But it's cleaned out now. I just have to take care of the collateral damage.
Which is better than rebuilding the whole computer by a long shot.