but it sounds like a very possible spyware problem. Not knowing if you have checked for that or not yet or what you already have for that type of program, we can start with these.
They are all free except for the trojan removers but you can get a 30 trial with them.
Spybot S&D (download, check for updates, read the tutorial and scan often, it also does some blocking)
http://www.safer-networking.org/en/home/index.html
Ad-Aware SE (a scanner, download, check for updates, read the directions and scan.
http://www.lavasoftusa.com/
cwshredder (stand alone unit)(another small scanner for certain things, ALL other windows should be closed)
http://www.intermute.com/spysubtract/cwshredder_download.html
Download anti-trojan (any of the following)
The Cleaner Pro 30 days trial - http://www.moosoft.com
TrojanHunter - http://www.misec.net/ (trial)
Also do an online scan at one or all of these.
Housecall (using IE with Active-X)
http://housecall.trendmicro.com/housecall/start_corp.asp
Housecall (all browsers using java)
http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php
PandaActivescan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
I have this ugly picture that keeps on coming up every time I boot up or shut down. It comes up just after the Windows log on happens and just before the computer shuts down. It stays online for about 20 seconds before I can do anything. I've looked at the Windows XP services and they look OK so can find the program that running this picture. I've looked for jpgs ect with no success.
Thanks
Steve

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic