My brothers machine just got hit really hard by MS Removal Tool, a false security client. I don't know if spybot detects it, so I apologise if you do but if you don't you can use http://www.removevirus.org/remove-ms-removal-tool as a really good detection guide since it tells you the registry files etc. Do you need me to email the files even if you use that guide?
Let me know your comment on this. Thank you.