[Frustrated_Mike]

Hey, I've got a hijack here that I can't seem to get rid of. It keeps poping up IE windows and flash advertisements. I've run Ad-Aware SE, AVG, CW shredder. AVG found a bunch of trojans which have been removed but the popups continue.

Here's the HiJackThis log.
Any help would be most appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 11:38:54 AM, on 11/19/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\mstdel32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WIN2000\guru.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\drivers\services.exe
C:\WINDOWS\system32\drivers\services.exe
C:\WINDOWS\system32\drivers\services.exe
C:\WINDOWS\system32\drivers\iex.exe
C:\WINDOWS\system32\drivers\iex.exe
C:\WINDOWS\system32\drivers\services.exe
C:\WINDOWS\system32\drivers\iex.exe
C:\WINDOWS\system32\drivers\services.exe
C:\WINDOWS\system32\drivers\iex.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\system32\drivers\iex.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgwb.dat
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Lynda\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

O2 - BHO: MSEvents Object - {B313D637-F405-4052-AC37-E2119AB3C8F8} - C:\WINDOWS\System32\qommm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [WinTOTAL Scheduler] C:\WIN2000\guru.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O16 - DPF: {2C15848B-21C0-406A-9902-56C8D90684F3} (alaWeb.clsGetStats) - file://C:\WIN2000\CONTENT\cabs\alaWeb.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1130957752846
O16 - DPF: {AED6797A-D608-11D4-89D2-00105AA3C57F} (alaGrid.TechDocSearch) - file://C:\WIN2000\CONTENT\cabs\alaGrid.CAB
O20 - Winlogon Notify: qommm - C:\WINDOWS\System32\qommm.dll
O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\enpsl1771.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\THluZGEgRC4gTWNXaWxsaWFtcw\command.exe (file missing)
O23 - Service: Local Security Authority Subsystem Service (lsass) - Unknown owner - C:\WINDOWS\lsass.exe (file missing)
O23 - Service: mstdel32 - Unknown owner - C:\WINDOWS\mstdel32.exe
O23 - Service: sysmgr64 - Unknown owner - C:\WINDOWS\sysmgr64.exe (file missing)
O23 - Service: wincvs1 - Unknown owner - C:\WINDOWS\system32\drivers\services.exe
O23 - Service: wincvs2 - Unknown owner - C:\WINDOWS\system32\drivers\services.exe
O23 - Service: wincvs3 - Unknown owner - C:\WINDOWS\system32\drivers\services.exe
O23 - Service: wincvs4 - Unknown owner - C:\WINDOWS\system32\drivers\services.exe
O23 - Service: wincvs5 - Unknown owner - C:\WINDOWS\system32\drivers\services.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

Edited by Frustrated_Mike, 19 November 2005 - 10:57 AM.