Let's see if this will pick it up:
Please download GMER:
If you cannot download the file, malware may be blocking the attempt. You need to download it to a clean computer and then transfer it to the infected one using a USB flash drive, or external media (external drive or CD)..
Save the GMER file to the Desktop.
Double-click on gmer.exe
If a Windows security warning appears asking if you would like to run the program, click on the Run button to allow GMER to start.
You may get a warning about rootkit activity and GMER may ask if you want to run a full scan. If this happens, please click on the NO button.
Now, configure GMER.
Please uncheck the following settings:
Drives/Partition other than System drive (normally C:\)
Next, click on Scan (may take a while).
When GMER finishes you will be back at its main screen.
Click on the Copy button (lower right), then right-click on your Desktop, and select: New > Text document.
Once the file is created, open it, right-click again, and select: Paste.
>>Also post the GMER report in your reply.<<
Note: Please, do not take action on any of the information on the GMER report!!
Also download GMER’s mbr.exe: http://www2.gmer.net/mbr/mbr.exe
>>Save it on your C drive (so the file is recognized as C:\mbr.exe).
Go to Start >Run, and type cmd in the blank area
At the command prompt (black screen) type or copy/paste the following commands, one at a time, and press Enter after each:
Then, type exit and press Enter to close the command window.
The report created in the command window is saved to C:\mbr.log.
>>Please locate the mbr.log, and post it in your reply.<<