rhema, read here: http://www.newbie.org/help/messages/22472.html

Then do a search through the text for msgked.... you should find your solution. A little tip when searching for things like this, drop the extension.

Anyway, in case you are too impatient to read through the entire thread, boot in safe mode, and delete the offending file. Or, if you want to keep it for educational purposes, rename it to something like msgked.ded, then reboot.

Chances are that when you reboot, youare going to get an error message that something in the registry is looking for the file you just renamed. Take note of any unusual keys or file names, and search the registry for those names, and delete every key associated. Did I mention, please make sure to backup your registry previous to messing with it?

Has anyone heard of a spyware named --jao.jao.1\ ??
It hurts me to say this, but I haven't really found any good info on this... a couple russian sites, and that's about it.