Check out whether your task manager (Ctrl+At+Del) has been disabled, if it has try the Antivirus instructions below.
XP Pro
Click Start, Run and type in gpedit.msc and press OK.
Expand the + with the left mouse button on Administrative Templates under the User Configuration.
Expand the + with the left mouse button on System. Left click on Ctrl+Alt+Del options.
In the right hand pane select Remove Task Manager. Right click on it and select Properties. If this setting is enabled and users try to start Task Manager, a message appears explaining that a policy prevents the action. So by disabling the policy, you are enabling the Task Manager. Click on Setting, Select the Disabled radio button, Apply and press OK.
If that does'nt work try this.
From another PC download and install these programs and copy the the installed folder along with VundoFix.exe to a USB Stick.
Restart the PC in Safe Mode and turn off System Restore insert the USB Stick and run Sophos.bat when it is completed run VundoFix.exe. When the PC reboots start in Safe Mode again and run Spybot.
Download Spybot - Search & Destroy 1.5.2 and install it. Update it. http://www.safer-networking.org/en/download/index.html
Download Sophos and the latest IDE Files. Install it and extract the IDE files to the C:\SAV32CLI folder.
http://www.sophos.com/support/knowledgebase/article/13251.html
Copy and paste the below two lines into Notepad and save the file to the USB Stick as sophos.bat, it will scan and remove.
===============================
CD SAV32CLI
SAV32CLI -REMOVE -P=C:\REMOVLOG.TXT
===============================
VundoFix is a freeware removal tool for many of the known variants of Trojan.Vundo, Trojan.Conhook and other similar infections.
http://vundofix.atribune.org/
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's finished scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Also download and install CCleaner to tidy up your Registry. Let it run through until there are no errors left.
http://www.ccleaner.com/download
The Sophos SAV32CLI folder can be safely deleted after it is copied to USB.