Something is changing my comp's font.

I'm not sure what it is, but there is something on my computer that keeps changing the font of everything to like symbol. When this occurs I cant read anything like where to go to change the font, so i just do a system restore to jan first and that will fix it, i'll shut off the comp... only to come back to find it changed again. My McAfee internet security doesn't find anything, and neither did an expired spy-subtract. Ive went in and tried to search for anything suspicious, but nothing jumps out at me...any suggestions?

 

I downloaded antivir from this site and was able to find a few trojans. They were loocked by windows so it said they would be deleted after a restart. So I restarted the comp right after the scan finished and it returned to the way it was before I restored my comp to an earlier date, with the unreadable font. I can restore it, but it changes back ever time I restart my comp...and i need to restart it to remove the trojan's...any ideas?

 

do the following :

run -> msconfig

and go to the startup tab. Look here and see if there any strange programs that you dont recognise. Post anything that you are not sure about.

There might be a program that is running at the startup thats changing your settings.

Another option is to goto msconfig again and check selective startup and unselect the "load startup items" This will tell you if its a program in the startup list.

Post back with the results.

 

ok.. im not to familliar with a lot of things so here we go:
C:\Program Files\Java\j2re.4.2_05\bin\jusched.exe
C:\hp\KBD\KBD.exe
C:\WINDOWS\SMINST\RECGUARD.EXE
C:\WINDOWS\system32\ps2.exe
c:\temp\salm.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
"C:\Program Files\Internet Optimizer\optimize.exe
c:\windows\system\hpsysdrv.exe
Those are the ones I don't know.. i may know these, and i may not know others.. anyway this is what the AntiVir showed on my last scan for the trojan. TR/DLdr.Delf.R
This is my second time doing this so i think ill shut off all the start ups before my resart. Thanks for your help.

 

Cahnces are, its spyware or a virus. Its messing around with this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts

read this:

http://forums.majorgeeks.com/showthread.php?t=35407