I am with HT on this....the best way to recover from a compromise is to reinstall......you could be fighting with this for weeks as TCP\IP is hardcoded into XP....you may never really be able to recover to a stable system.

I have spent days trying to fix something....where I ended up reinstalling the OS....which I should have just done from the start.

live and learn.

Of course back up your data first

MLF