Quote:
My Winlogin cleaning notes are not on hand, but here's a start. Since you know the malicious DLL and EXE names, find and delete them. You may need to access the Services portion of the registry (I think it's triplicated, so check each one). Remove references to the bad files and, possibly, recreate good references to the real files by retyping the info from a known good computer.

If it is that integrated into Windows then don't bother cleaning it and just reinstall Windows from scratch. You won't know for certain whether you've cleaned out all the spyware/adware/whatever. Do you want to take the risk that there is some extra component that you've not found that is logging your keystrokes?