Have a look at this thread thatr I wrote a few days ago: http://www.daniweb.com/forums/thread88342.html It provides a step by step guide as to how to get rid of the Vundo trojan - the principles in that case surely apply to yours. The file you identified, c:\d.exe is the likely culprit and must be disposed of (and prevented from being recreated). My advice is, of course, at your risk. Good luck.