I did some roaming with regedit last night. Found left over references to Enigma software Group Spyhunter, which I had run and uninstalled. Files were left on the computer for that program, but none looked like active programs. However, combofix log noted a running process from spyhunter. There is also a anti-phishing program installed that I forgot about. I assume the list of bad web sites under P3P ZoneMap Domains are from Spybot immunization. I noticed several file extensions that bothered me, called: .zfsendtotarget, .z96, and .lst. Is it ok to run updated spybot immunizations? I will hope to hear from you soon.
I bought a new usb powered expander to try switching for each of the old ones to see if it changes the boot problem. However, it seems that problem would stop access to safe boot options, so might be virus created.
thanks