You could also download HiJackThis from either TrendMicro or or google it. HJT will generate a log file on everything that's running, plus reg keys etc that may be hijacked by virus. Next upload the log at (redirects to a different domain but its safe) and parse it. It should give you some useful advice on what keys have been changed in IE and what processes are dodgy. Run it as administrator.