Problem Identifying Threats

I appolagize for the wall of text.

I have been working for a company on the ICT side for close to 3 years now and i have been working on contracted jobs for about 10 years before that.
I am well versed on systems, im not a silly hippo

However this problem i just cant seem to shake it off of myself, I have followed guides listed here to try and sort it instead on parking on my arse and just going :cry :cry

I understand that you guys are really busy and possibly will not be able to answer me any time soon, however if you do i would like to thank you for the time and effort you take well in advance

I have been battling for almost 2 months now on this problem I have, i'm almost at my wits end.

Now onto what ive seen

Virus Type
-Trojan - Pick ups by Anti Viral software tried.
-Worm - Spread across an entire network ( sbs 2003 server included)
-Root Kit - Every reboot the system seems to immediately become re-infected and its condition worsened.
- I based this on the behaviour that i have noted on the systems

System Symptoms
- Sudden Drop in performance
- Long startup times (15-20 minutes)
- Long Shutdown times
- Slow down in network connectivity to server. Different systems on the same network line show normal acceptable network speed.
- Long Login Times (becoming stuck)
-Long Log off Times (becoming stuck)
- Unable to connect to the server as the user is not authorized, even if I attempt to log onto the server on an Admin account.
- After extended exposure all systems suddenly are unable to connect to the anything over a network.
- After checking IPCONFIG there are no details listed.
- Checking the status of the connection shows that there is no communication to or from the device, checking connection status shows that there is a complete blank. ( image attatched)
- Tracing the date into the Registry led me to a folder with ms_passthrump. ( image attatched)
- Task Manager disabled/not loading when called
- Applications not launching/shutting down as they are launched
- Explorer not launching unless launched via Task Manager
- Normal user login restricted by security log becoming suddenly full. This happens after a reboot after the first initial signs.
- Difficulty in installing Anti Viral Software as install files are closed shortly after they have begun. This has been worked around by booting in diagnostic mode.
- AVG Free, Avast Anti-Virus Free, Nod32 Fully Licensed , E-scan, Malware Bytes, Spybot S&D
- The above mentioned software does not seem to help prevent or slow the problem.
- AVG Failed to pick up any viruses but did detect that svchost.exe file was being manipulated. Avast became disabled after installation offering no protection.
- Avast Anti-Virus failed to detect anything wrong with the system, Avast became disabled after installation offering no protection.
- Malware Bytes picked up several files and removed them, however did not help prevent the systems from becoming re-infected. In some cases it would be disabled shortly after install, if installation was even possible.
- Nod32 seemed to work well on a Windows 7 machine that was being used to help solve the problems, ie formatting and/or scanning Hard Disks from the systems.
- Spybot S&D seemed to be no help at all.
- E-Scan, picks up problems with files and the odd virus now and then, however it is not detecting the cause of the virus.

I have tried other methods such as
- Running Combofix
- Removeitpro – Trial
- Installing SP3
- Installing latest windows XP patches.
- Updating Adobe Reader
In some cases a system becomes completely inoperable and requires a full reinstallation of XP, booting into any safe mode is not possible as the pc instantly reboots once the files for safe mode have loaded, I have done installs with several different windows xp discs to rule out the possibility of one of the discs being infected. (although unlikely)
Ive installed E-scan/ NOD32, along with Spybot S&D, finally fully patching up to the latest version of Windows XP to rule out any possible security holes.

Today ive noted on one of my users systems that files she had recently worked with suddenly disappeared, and a command prompt screen quickly appeared and vanished, I had a closer look her network usage was through the roof (In 5 minutes close to 20 mb of info had been sent in and out of the NIC) and that upon disconnecting her network adapter her systems suddenly stopped performing so poorly.

Please if there is anyone out there that has an idea as to what further steps I can take, other anti viral/malware utilities or even has experienced a similar thing please help.

-Regards
S3rgant

I have attatched some screen shots to give an idea about the cloned network card story I was on about, along with a combofix log for the same system. ( I hope that is okay)

Please let me know if there is anything else that i can upload to help.