It is sad that the latest HijackThis doesn't look registry entry in policy key(i forgot the location), most of the new malware autostart up from there.