-----Original Message-----
Don't spend any cash dollars on this kind of issue.
Here's what I'd suggest: If you run HijackThis, it will create a log of
locations in your installation that run various things at startup.
If you search through that log, you will find a line which includes Rundll,
and the name of this missing bit of code--doc?oc1681.
You can then check off that line in HijackThis and it will be removed,
safely, in a way that allows you to put it back if there's a problem.
You could also choose to go to a specialized forum and post your complete
HijackThis log and ask whether there's anything else left that needs to be
cleaned out--but if you feel you have no more symptoms, perhaps that's
overkill.
HijackThis can be found here:
http://www.aumha.org/free.htm
among many other places. Find it alphabetically in the left column.
There is a tutorial linked to in the descriptive text, as well as a forum
(here) link, which is an excellent place to get guided cleaning done.
HijackThis is an oddball name, but this is a simple and effective tool for
making changes to the registry entries that relate to startup items easily
and safely, and communicating about that process online.
You can easily (I suspect) remove this single item yourself, or you can ask
for help in the forum--and nobody will ask you for any money.
Thank you very much sorted. i did find a few suss