Tell him/her to open regedit and from find (edit/find) type "expl32.exe" and "expl32a.exe. It would appear that these two are also trojans.
Before you do the above, from regedit navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Highlight the folder and the startup group will be displayed.. is expl32.exe there? if so delete it and then follow the above.