That's where it gets tricky, as it can have different names.
Here is a removal guide for one variant of that trojan and I have some other methods linked and excerpted below.
Do you know how to edit your registry (use Regedit.exe)?
If so, look for this key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"SystemDLL32"=SYSTEMPATCH.EXE
Also look for a file called: SYSTEMPATCH.EXE
symantec says:
Quote:The file name of the attachment might vary. When executed, the Trojan horse sets the path and file name of the attachment (usually c:\windows\temp\filename.exe) equal to the "SystemDLL32" value in following registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
So if you do not find the file, look for that value in the registry key and then look for that name.