Yep, SP3 includes all the earlier fixes.

I've seen this before, it's a virus that is not identified by AVG.

I spent a day hacking at it before I gave up and just nuked and repaved.