Thanks for all the responses. It wouldn't seem like deleting all the run key items would be the top choice since there are valid programs that start from there, but it could certainly be looked at to determine if there are any nasties starting there.

Sysedit would seem to be a good place to look too.

My company won't pay for the anti-keylogging program. Unfortunately :-(

Jag - I'm curious why you aren't concerned with keyloggers.