The location of the files that were removed by Ewido tells me you have NOT followed the instructions given in PP's thread because these files were tmp files. If you had run CCleaner before you began your other steps some of these at least should have been removed.
First click start, search, for files or folders then type autoexec.nt. Then click on the search now key. If you pull up an autoexec.nt file, check to see where that file is located. If the file is located at C:\winnt\repair all you have to do is copy that autoexec.nt file into the C:\\WINNT\SYSTEM32 files.
Can I ask you to do something? If you want help from here, can you just stick with here? But jumping all over to other forums and trying various fixes you can make things more complicated.
The FixWareOut is fine but by running various items before checking in here, it just makes the clean up that much harder.
You need to run HJT again and place checkmarks next to the following;
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKCU\..\Run: [internat.exe] internat.exe
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spysp...CabInstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F6F117C-E815-4580-BA7D-846BC2968AE9}: NameServer = 85.255.115.6 85.255.112.20
O23 - Service: RA Server (Slave) - Unknown owner - C:\WINNT\Slave.exe (file missing)
Once you have placed the checkmarks then click the FIX button.
Exit HJT.
Now please try again to boot to safe mode.
Run Ewido again, have it fix what it finds and save the log.
Reboot to Normal.
TURN OFF Ewido.
Run HJT again and save the log.
Post back here with the new HJT log and the new Ewido log.
Even if Ewido says it cannot fix something please just post that information back here. Don't take any other steps.
There WILL be other steps to take but lets take them in order as needed, not randomly.
