Hello Jeeves1983 and welcome to TSG. Let's see what we can find. Please follow the steps below in order:
Before running a new scan let's clean out the temporary folders.
Download
ATF Cleaner to your Desktop.
- Double-click ATF-Cleaner.exe to run the program.
- Click Select All found at the bottom of the list.
- Click the Empty Selected button.
If you use Firefox browser, do this also:
- Click Firefox at the top and choose Select All from the list.
- Click the Empty Selected button.
- NOTE : If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser, do this also:
- Click Opera at the top and choose Select All from the list.
- NOTE : If you would like to keep your saved passwords, please click No at the prompt.
Close ALL Internet browsers (very important).
Click the
Empty Selected button.
Click
Exit on the Main menu to close the program.
Now download OTScanIt from
here or
here to your Desktop and double-click on it to extract the files. It will create a folder named
OTScanIt on your desktop.
Note: You must be logged on to the system with an account that has Administrator privileges to run this program. - Close ALL OTHER PROGRAMS.
- Open the OTScanIt folder and double-click on OTScanIt.exe to start the program (if you are running on Vista then right-click the program and choose Run as Administrator).
- In the Drivers section click on Non-Microsoft.
- Under Additional Scans click the checkboxes in front of the following items to select them:
- Reg - BotCheck
File - Additional Folder Scans
- Do not change any other settings.
- Now click the Run Scan button on the toolbar.
- Let it run unhindered until it finishes.
- When the scan is complete Notepad will open with the report file loaded in it.
- Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
- Save the file to your desktop or other location where you can find it back.
Use the
Add Reply button and
attach the file in your next post (do
not try to copy/paste it into the post).
Cheers.
OT
Login 
Malware Removal & HijackThis Logs 
