Glad to hear that my remote diagnosis was correct
They and you have no idea where these port scanning comes from ?
I have: Didn't you use multiple instances of god's eye and dominions to connect to the dominions server? This would result in mutliple inactive connections from your IP to another IP. Normally, they would appear from one port on your side to multiple ports on the other (attacked) side, and not the other way round (as it obviously was), but maybe they didn't notice ... .
If they believe that after re-installing from a manufacturers disk, and installing AV software and firewall from another disk which was tested with at least 2 up-to-date scanners, your system still may be compromised, they're a bunch of morons. Being that, they might haven't noticed the untypical connection characteristics.
Get yourself another ISP ASAP, if feasable at all...
Btw. you didn't answer my email - do you have trouble with email as well ?