you need to check your registry entries. some rouge entry is calling run32dll to run a malicious dll file.
PS: check your installed programs for any application installed which should not be there. Alsio check if there is Antivirus 2008 or 2009 XP is installed. (it is a well known rouge antivirus application)