try hijackthis!
if a system restore doesn't help you could run hijackthis and get the report!
Not sure if they're still around but bullgard allows you to use their software for a trial,they will supply support for this too. They suggest you run HJT and send them the report and will direct you to a solution.
Afew years back my system was taken over and part of an email bot,I was using norton so I thought I was covered....

Turns out this bot setup house in norton in the quarantine folder,a subfolder called"quarantine" so norton all but ignored it.
I'm no expert but my machine was doing similar things when that bot was infecting it.
YMMV.
