As an alternative, you could always just boot to safe mode (f8 on startup) and then run ad-aware/spybot/whatever. Not letting many processes run usually gives whatever anti-spyware app you're using the chance to remove everything; while running under normal mode there is usually the problem of what you've described of having a process restore files to something you've tried getting rid of.
__________________
Charlie was a chemist but Charlie is nomore, what Charlie thought was H2O was H2SO4
|