The name "kill.exe" makes me a
little nervous. Does it only suspend the process? I tried Process Explorer yesterday to stop the winlogon and explorer. As soon as I stopped winlogon, the machine restarted itself. If I stop exploer only, the trojan removing tool still can't detect the virus. I'll try your recommandation today when I get home. Thank you kindly.