Suspicious .dll on winlogon startup

[vieww]

Couple of weeks back I opened a suspicious .exe which I got from a link from a friend on msn and it infected my computer with viruses [ircbot etc.] and trojans. I searched for which files where the ones infected cause my antivirus couldn't spot them and so I tried to manually delete them. That didn't work but at the end I got rid of them with a trial version on avg 8.0 pro. All of the suspicous dlls [random names like dwttdlfq.dll pr hueuqwyq.dll] and processes on startup disappeared from spybot's system startup except from one.

C:\WINDOWS\system32\khFFVPGa.dll

I located it and managed to delete it (I can't find it with Windows search) but still I see it on startup. However, I checked spybot's process list and it wasn't running under any process. I've tried to delete it from startup but it always pops back up again.

Here is the startup entry:

WinLogon (current system) khFFVPGa.dll


I want to remove this entry for good! Any ideas?

[tashi]

Hello.

Please follow the procedure in this link: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)


Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you as soon as available.

Cheers.