This maybe difficult to pin down but, as DragoN implies, you should try to eliminate as many possible malware culprits as you can.
Try the following.
I suggest you print this out to help you follow my advice.
***********************
Make sure you have exposed all Hidden Files & Folders.
To enable the viewing of Hidden files follow these steps:
1. Close all programs so that you are at your desktop.
2. Double-click on the My Computer icon.
3. Select the Tools menu and click Folder Options.
4. After the new window appears select the View tab.
5. Put a checkmark in the checkbox labeled Display the contents of system folders.
6. Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
7. Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
8. Remove the checkmark from the checkbox labeled Hide protected operating system files.
9. Press the Apply button and then the OK button and close My Computer.
***********************
I suggest you run some first line (free) removal programs. These three ...
Superantispyware >
http://www.superantispyware.com/
AVG Anti Spyware >
http://free.grisoft.com/doc/5390/us/frt/0?prd=asf
TrojanHunter >
http://www.misec.net/
Download each and have them run full scans on your entire systems.
Let them fix whatever they find.
***********************
Rehide your Hidden Files & Folders by carrying out the reverse operation to that described at the start of this post & reboot to normal mode.
If this doesn’t succeed in fixing the problem download a self-extracting copy of HijackThis from here …….
http://downloads.malwareremoval.com/hijackthis_sfx.exe
Save it to your Desktop.
Double-click on the file hijackthis_sfx.exe file and it will self-extract into its own folder ……
C:\Program Files\HijackThis
Go to this folder and run the hijackthis.exe file.
From the menu click on "Do a system scan and save a logfile".
Copy and paste the HJT logfile to this thread. More specific removal instructions will follow for any malware revealed.
I may also advise using Process Explorer, for more details on Running Processes, but let's see what happens with this first fix.
MM