Why don't you post a HJT log which will show what's running at startup.
Go to this site
http://www.trendsecure.com/portal/en...?page=download.
Click on 'Download HijackThis Installer'.
*Save HJTInstall.exe to your desktop, or to the location where you normally download.
*Double-click on HJTInstall.exe.
*Click on Install.
*By default it will install to C:\Program Files\Trend Micro\HijackThis.
*Once installed, it will launch Hijackthis.
*Click on the 'Do a system scan and save a logfile button'. It will scan and the log will open in notepad.
*Click Save to save the log file.
*Click on 'Edit > Select All' then click on 'Edit > Copy' (or Ctrl-C) to copy the entire contents of the log.
*Come back to this thread and Paste (or Ctrl-V) the log in your next reply.
*DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.