A number of experts have had a look at this and we have some things to try.
Firstly lets remove some tools and the driver sptd.sys and rerun Combofix but in a different way. I was of the opinion that spd.sys wasn't infected because of some of the tools we have run but I am told that one infection can still hide behind it so...
Lets carry out these actions:
Follow these steps to uninstall Combofix and tools used in the removal of malware. This will also clean out and reset your Restore Points.
- Click START then RUN
- Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
- Double-click OTL.exe to run it. (Vista users, please right click on OTL.exe and select "Run as an Administrator")
- Click on the CleanUp! button
- Click Yes to begin the Cleanup process and remove these components, including this application.
- You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.
Please download the OTM by OldTimer.
- Save it to your desktop.
- Please double-click OTM.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
- Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:processes killallprocesses :Files C:\WINDOWS\system32\Drivers\sptd.sys :commands [Reboot]
- Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
- Click the red Moveit! button.
- Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
- Close OTM.
Finally in this post
Download Combofix from again either of the links below. You must rename it before saving it. Save it to your desktop.
Link 1
Link 2

Rename ComboFix to Confuse.exe
--------------------------------------------------------------------
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.
Double click on Confuse.exe & follow the prompts.
- When finished, it will produce a report for you.
- Please post the C:\ComboFix.txt for review.