Vista Malware cleanup

Still not sure what happened. To the best of my recollection, I simply clicked on an email link in yahoo email (from a trusted site) when everything went haywire. IE was was taking me to scareware sites, and popups stating I had trojans were appearing. I could not launch Task Manager by right click on the taskbar and had no control over IE.

I managed to launch ProcessExplorer and kill an unrecognized process called CYT.exe which helped a little. I also located and deleted iexplorer.exe in ..\AppData\Local which restored normal browsing. I have run through all the steps listed in Vista and Windows 7 malware removal. These steps indicate no problems found. However, Most of the links on my taskbar, and attempts to launch Security Center from the control panel result in a popup that states - c:\Windows\System32\rundll32.exe "Application not found". Same thing when I try to launch Task Manager from the task bar - c:\Windows\System32\taskmgr.exe "Application not found". Anything remotely security related seems to be affected in the same way. However, all the files do exist in System32 and can be launched manually with a doubleclick. I ran sfc /SCANNOW to confirm the DLLs and EXEs in System32. sfc ran to completion. It was unable to repair tcpmon.ini. So now I'm trying to determine what next. Any help will be appreciated.

 

Attachments attached!

Thank you.

 

Most of the links on my QuickLaunch toolbar, Start Menu, Notification Area and attempts to launch Security Center from the control panel result in a popup that states - c:\Windows\System32\rundll32.exe "Application not found". Same thing when I try to launch Task Manager from the task bar - c:\Windows\System32\taskmgr.exe "Application not found". Anything remotely security related seems to be affected in the same way. However, all the files do exist in System32 and can be launched manually with a doubleclick. I ran sfc /SCANNOW to confirm the DLLs and EXEs in System32. sfc ran to completion. It was unable to repair tcpmon.ini.

This behavior seems to be limited to the profile I usually use (Standard user). My admin user profile is behaving correctly. Should I just delete the mis-behaving profile and create a new one?

Thanks for you help