You could post a hijackthislog, maybe we can find out some more things:

www.hjt.klaffke.de/en