I would grab several other scanning utilities such as TSSDKiller, malware bytes and spybot and run them all in safe mode. A fairly common behavior in more advanced malware is the ability to inject code into other processes and the IAT. Targetting DLLs is pretty common.