qoologic strikes again, help plz

report from FindQool:

Mon 05/08/2006
Running from: C:\FindQool
PLEASE NOTE: LEGIT FILES MIGHT BE LISTED. IF YOU ARE UNSURE OF WHAT IS LISTED LEAVE THEM ALONE.

Known file names

MD5 Check....
C:\WINNT\system32\dveqv.dat
C:\WINNT\system32\xxpnji.exe
C:\WINNT\system32\oigrj.exe
C:\WINNT\system32\egonbqn.dll
C:\WINNT\system32\ydnvtnc.exe

Files found with locate com.
C:\WINNT\SYSTEM32\YDNVTNC.EXE
C:\WINNT\SYSTEM32\EGONBQN.DLL
C:\WINNT\SYSTEM32\DVEQV.DAT
C:\WINNT\SYSTEM32\XXPNJI.EXE
C:\WINNT\SYSTEM32\OIGRJ.EXE
C:\DOCUME~1\ALLUSE~1\STARTM~1\PROGRAMS\STARTUP\PGBOP.EXE
Re-check using dir /a:-d
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
05/08/2006 04:35p 127,488 pgbop.exe
...

HKEY_LOCAL_MACHINE\software\qstat
HKEY_LOCAL_MACHINE\software\classes\folder\shellex\columnhandlers\{ce3a44d8-bc88-4d62-a890-42d96245f8d6}

...
Runs, Listed here as a Doublecheck for the locate com results
HKLM
"wptfjg"="C:\\WINNT\\system32\\xxpnji.exe reg_run"
HKCU
"tmbhk"="C:\\WINNT\\system32\\xxpnji.exe reg_run"
...

Files In Winlogon shell and userinit
Listed here as a Doublecheck for the locate com results
shell REG_SZ Explorer.exe, C:\WINNT\system32\oigrj.exe
userinit REG_SZ C:\WINNT\system32\userinit.exe,ydnvtnc.exe
...
SWReg utility
Written by Bobbi Flekman © 2005
Findqool edited 4/05/2006


Report from RKFiles:

C:\Program Files\RKTOOL

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINNT\system32\nsj93.dll: UPX!

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
C:\WINNT\RMAgentOutput.dll: UPX!
C:\WINNT\tsc.exe: UPX!
C:\WINNT\vsapi32.dll: UPX!t4
Finished
bye


SOOOOOOO, whacha think boyz?

Thanks!