said by Name Game 
:said by Daniel :If he did something foolish that could have resulted in a compromise then the best defense is to reinstall.
Trojan detection is a very weak thing right now. It's basically like this: if you find one using a tool, you have one. But if you don't find one it doesn't mean much of anything at all.
If in doubt, reinstall.
what is your advice if he finds one..reinstall ? Where did you get your info that trojan detection is weak.
seems to me the op already stated a trojan was detected and three products call it out.
and this statement "But if you don't find one it doesn't mean much of anything at all."
Are you assuming that every system out there is infected ?
In general, detection of a trojan implies a trojan is there (given 0% false positives). Non-detection of a trojan does not imply anything about the existence of a trojan. For all but the isolated case your preferred course of action should be to flatten and rebuild - that is, it should be the rule rather than the exception. By doing selective removal based on tool results you're basically saying: "I am smarter than the attacker; I know exactly how and when the attacker has changed my system and can restore the system to a known good state. (without wiping)." 
