NIS, Trojan removal

Received bogus American airlines email and unfortunately opened the attachment, ticket.exe; NIS removed "a1825d.exe" because of suspicious activity on the system. Done full system scan, no viruses/Trojan detected, however, now Firefox is periodically taken over by full screen advertisement notices - I've read this is related to a Trojan delivered by ticket.exe. Anyone have advise?