Hacktool...

[TemplariShadow]

So I've gone through cleaning a few times now. And gone without any signs of the virus for hours or minutes each time.

Tried AIMfix, but thought I'd throw up this log just in case before I hit Safe Mode again to clean up..

 

[RealBlackStuff]

First Read: Use these HJT-instructions when asked
/P/ Process needs to be stopped
/S/ Service needs to be stopped
/U/ Uninstall anything to do with this
The text underneath goes between the dotted lines of that post.
...................................................................................................
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\DOCUME~1\NATHAN~1\LOCALS~1\Temp\\xx.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
/P/U/ O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
/P/U/ O4 - HKLM\..\Run: [kmw_run.exe] kmw_run.exe
/P/S/ O23 - Service: IKQ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\NATHAN~1\LOCALS~1\Temp\IKQ.exe
...................................................................................................