Hi Maria,
My first step is usually to restart in Safe mode, then delete the trojan
itself and the reference in the registry that loads it. Usually, it can be
found under one of these keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg
You might also want to purge any restore points, as the bug will likely be
in them as well.
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone