a.Click Start, and then click Run. (The Run dialog box appears.)
b.Type regedit
Then click OK. (The Registry Editor opens.)
c.Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
d.In the right pane, delete the value that the Trojan added. The value varies depending on the variant.