Full hard disk, identifying files.

I've recently had a virus/malware infestation on an old Windows 2000 Server that I've now managed to clean. Unfortunately there was about a week where the trojans had a free reign on the box and managed to download enough crap to fill up the C drive.

How can I find out what the rogue files are and delete them without removing the important Windows stuff? I've tried using the built in search function to show files modified in the last week but the results just turn up every file on the machine!

Ok, answering myself again on here :)

Found them, not viral they're IIS log files in the system32/w3svc1/ folder. Killed them all and have my hard disk back again!

Why didn't you just wipe and restore from backup??? You do have a backup, right???

Because they needed the box on all the time, and yes, of course we have a backup.