this thread in this forum might help:
http://forums.thatcomputerguy.us/index. ... topic=4516
It requires HJT (hijack this!) which isn't commonly used around here.
It sounds like spybot caught it and got rid of it, but it's still calling to the regkey on startup to files that no longer exist. Find the regkeys (maybe the one referenced in the thread) and get rid of them. This will stop them from being called on startup or wherever.
You can do this by going into run >> regedit >> HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows / Current Version / Run and checking out the keys there. But DON'T DELETE IT
unless you know what it is.