Jetswap Safesurf infection on SBS 2003

We have an SBS 2003 that got infected with Jetswap Safesurf last week. The server was running slower but still running until someone ran malware removal that set off a reaction that resulted in lsass.exe being compromised (error code 1073741819). The server restarted eventually but has cycled since, restarting every 10 minutes or so and not staying up long enough to get the logs off of it.