I recomend that you found the file. Look at regedit into the local_machine folder, then software, then Microsoft, then windows, current vercion, run. and check the keys in there.
Post here any suspicius key for more help


xDrack