Hi,
Run hijack this from trend micro and post the log to read? Sure a malware process is running!