remove these entries
O4 - HKLM\..\Run: [NT Logging Service] syslog32.exe
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [Microsoft System Checkup] libsys32.exe
O4 - HKLM\..\RunServices: [Microsoft System Checkup] libsys32.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0ECA0590-9D7D-4621-9693-F77A78E4EAD8}: NameServer =
12.156.164.30 12.156.164.31
O17 - HKLM\System\CS1\Services\Tcpip\..\{0ECA0590-9D7D-4621-9693-F77A78E4EAD8}: NameServer =
12.156.164.30 12.156.164.31
O23 - Service: NT login service (ntlogin32) - Unknown owner - C:\WINDOWS\System32\libsys32.exe (file missing)
now go to the root of the c drive and delete anything that says winupdates. if you want, post a screenshot of c: so I can take a look
then post a new log