Using resources from various sites, I think I removed all active content, but am left with settings made by the trojan in its attempt to thwart removal.
One change made that I have not figured out yet is how they are able to prevent Safe Mode from running. The computer boots normally otherwise, but any Safe Mode option hangs.
The trojan also made it so that exe files will not run from the command prompt, from double clicks, and right-click Open. I got regedit.exe to run by copying it and saving as regedit.com. Running IE7 and other applications from shortcuts still work.
One possible cause I found posted as a reason for the exe problem (changing HKEY_CLASSES_ROOT/.EXE) does not appear to be the problem because the registry entry there is the same as I see on other XP computers.
I am still looking for the Restore disk for this machine (an eMachine a few years old), so suggestions that don't require that CD are appreciated.
Edited by 4arter, 20 April 2009 - 02:48 PM.
Moved from Win XP Home and Pro ~Pandy