OK, you have a lot to delete here, so take your time on this.
Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.
Go to Start->Run and type in regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. While in the Registry Editor, navigate to:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ and delete
OemStartMenuData
Next go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved\ and delete these:
{918E9A48-6797-47EA-BE96-DA555E96C981}
{6420135A-397A-444A-BB0C-248CFC4A8DCB}
{5C36201D-AECC-470C-A092-5E69B7E24829}
If any of the above registry keys are giving you problems deleting, right click on them and click on Permissions. Then click on the Advanced button. Make sure the first box (Inherit from parent...) is checked. Click OK and OK. Then try deleting the entry again. Once you're done, close the Registry Editor.
Download KillBox (
http://www.greyknight17.com/spy/KillBox.exe). Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. For each of the following files below, check the box that says 'Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file - choose NO when it asks if you want to reboot):
C:\WINDOWS\system32\iietcomm.dll
C:\WINDOWS\system32\avi3duag.dll
C:\WINDOWS\system32\kcdbene.dll
c:\windows\system32\aenbho.dll
c:\windows\system32\afvpack.dll
c:\windows\system32\agctres.dll
c:\windows\system32\avi3duag.dll
c:\windows\system32\cmmcat.dll
c:\windows\system32\cutsrvps.dll
c:\windows\system32\dccpmon.dll
c:\windows\system32\ddmasf.dll
c:\windows\system32\di32gt.dll
c:\windows\system32\domsvinn.dll
c:\windows\system32\dwtmsft.dll
c:\windows\system32\dy8vb.dll
c:\windows\system32\en66l1~1.dll
c:\windows\system32\hqetcfg.dll
c:\windows\system32\hr8605~1.dll
c:\windows\system32\ieq.dll
c:\windows\system32\iumontr.dll
c:\windows\system32\jgvaee.dll
c:\windows\system32\kcdbene.dll
c:\windows\system32\kcdhe319.dll
c:\windows\system32\khdlt1.dll
c:\windows\system32\kjuser.dll
c:\windows\system32\ktdes.dll
c:\windows\system32\moaudite.dll
c:\windows\system32\myrddm.dll
c:\windows\system32\mzc40u.dll
c:\windows\system32\nimarta.dll
c:\windows\system32\npvdmd.dll
c:\windows\system32\ohbctrac.dll
c:\windows\system32\pllmon.dll
c:\windows\system32\pqrfctrs.dll
c:\windows\system32\qidwipes.dll
c:\windows\system32\rupcfgex.dll
c:\windows\system32\rvutetab.dll
c:\windows\system32\u0ru0a~1.dll
c:\windows\system32\u0ru0a99ed.dll
c:\windows\system32\wdn32spl.dll
c:\windows\system32\wfigest.dll
c:\windows\system32\wgnetmgr.dll
c:\windows\system32\wpashext.dll
c:\windows\system32\wwwfax.dll
If you have Windows XP, go to C:\Windows\Prefetch and delete everything inside that Prefetch folder.
Run the CleanUp program now and choose Yes when it asks if you want to log off.
Restart and run these programs/scripts again - HijackThis (both the scan log and the StartupList), Silent Runners, Find-qoologic, DllCompare and Find-It. Post those new logs here.