Windows NT W32.rinbot

I work on medical equipment, and we use in some of are platform windows NT 4.0 we have a Hospital infected with a Trojan but went I delete the entry from the register it comes back it does not disappear but I cannot find the file that is doing this. Any one knows how to find the infected file so it would not come back?