I think (now) I'm infected with the above Trojan. I first noticed that something was wrong when Norton AV protection turned itself off for no apparent reason. To cut a long story short, I'm at the stage where I can boot to the desktop, but, do nothing else other than to open a folder link which then gets me into Explorer. NO application will run from the links on the desktop, I always get the message "Windows can not find ........ . Make sure you typed the name correctly, and then try again. To search ....." I've now borrowed another computer so that I can connect to the net with the hope of finding an answer. I hope not to have to re-format with all the associated hassle. Thanks for any help that you can give, all the best John

If you are correct about the trojan you have, Norton should be able to detect and clean it. There is one step that you must do to completely get rid of it. You must disable "system restore" start>programs>accessories>system tools>system restore. Turn it off and restart your computer, as the computer is starting through the boot sequence, tap the F8 key so you can enter the safe mode. Once in the safe mode, use Norton to scan and clean your system.

Since you can't get any of your apps to work...windows can't find filename.exe...the trojan likely messed up your file associations in the registry. With the good computer go to: http://dougknox.com/ On the left click xp fixes, file association fixes, .exe association fix, it will be a zip file so you will need to unzip it on the good computer, once unzipped it is a .reg file...put that on a floppy, run that on messed computer, answer yes to the import prompt. Probably have to reboot Now you should be able to update norton and remove the trojan in safe mode as suggested above.

capt, blender, thanks for the help, I've downloaded the 'fix' from dougknox.com and put it on a floppy, I've now got to go to work, it's 06:15 here but as soon as I get home I'll give it a try. Have not got time to do this now. Again thanks for the help, I will post back later to let you know what is happening. John

Back again, I have never had an easy problem to solve first time yet!! I have got the 'fix' & put it on the 'C' drive of the infected computer, when I try to run it, I get the message - "Registry editing has been disabled by your administrator" Any idea how to turn this back on? I am the only user on this machine, do not(?), have an Administrator account on it - other than if I start in 'Safe mode', any ideas gratefully received, thanks again, John

I would like to know the solution too. I am in the same position as John. I tried running Norton when booting from the cd, but it doesn't seem to scan anything. I found a little work-around to come online. I am still able to open the my computer link, so I used that to come online, but that's all I can do. I ran the Norton online scan, but I don't see any way to remove the virus. Help please.

ok i had the same problem and now i have it fixed. (hopefully you have a good computer or someone else to help you) start up the computer in safe mode. make sure you have the .exe association reg patch and run it on the bad computer. next, you can actually run things, so load up norton antivirus and do a whole system scan. i believe there's a file called spoolix.exe that runs as a result of you running the trojan, so the best thign to do is run msconfig and disable the thing called "spoolix" and the delete the spoolix.exe file in the windows directory. not sure if this happens to everyone, but it happened to me.