system
13
you did it all ? how about telling us some details about the results then ? 
describe the popups; are those normal browser popups, or grey (blue) popups of windows Messenger service ? you can disabloe the latter via config → services
what about the hijackthis-log ? 