Which messenger settings did you turn off.  It sounds like you need to turn off the Windows Messenger Service, which is different from Windows Messenger and MSN Messenger.  See the following:

http://grc.com/stm/shootthemessenger.htm

Steve

click on the link "Essential spyware removal steps and other hijackthis help forums" below and follow all the instructions (Step 1-5) ,install microsofts anti spyware software from the link below and then repost post the hijackthis log(In the virus forum/ChrisRLG's site) after reading (Instructions a/b/c) after downloading/running all the programs mentioned there alongwith the Online anti-virus scans (instructions on how to run the online virus scans http://forums.thatcomputerguy.us/index.php?showtopic=5122 ).Update all the programs ie spybot http://www.safer-networking.org/en/howto/update.html ,AnD adaware
before logging into safe mode to run it .Then repost your hijackthis log so the experts can help you remove the remaining nasty spyware .

Hi marywhit,

Stop Popups

Popups are those annoying ads that pop up (or under) while you’re surfing the ‘net. There are three kinds of popups, and you’ll need to do three separate things to block them.

For Windows Users:

* Pop up windows created by web pages can be easily blocked by a third-party pop up blocker like the free Google Toolbar at http://toolbar.google.com/ However, the best way to block popups (and other nasties like browser hijackers) is not to use Internet Explorer at all. I recommend Mozilla at http://computerhelphow-tos.blogspot.com/www.mozilla.org/products/mozilla1.x/ or Firefox at http://mozilla.org/products/firefox/ Both have built-in pop-up blocking but you must turn it on in the preferences.

* Pop-ups can also be created by spyware. These programs run in the background and can appear any time, even if you’re not online. I recommend Spybot Search & Destroy at http://safer-networking.org/ and AdAware at http://www.lavasoft.de/ to clean out spyware and block it in future. If you’re going to continue to use Internet Explorer also get Spyware Blaster at http://www.javacoolsoftware.com/spywareblaster.html to prevent browser hijacking.

* Finally, there’s a really annoying kind of pop-up that’s, in my opinion, a security flaw in Windows NT/2000/XP. These versions of Windows have a function called netsend that’s designed for system administrators. They can use it to communicate with all the computers on the network. Unfortunately, it can also be used by a spammer who can send a pop-up to ANY computer on the Internet. To block this form of Messenger spam you can turn off the Messenger service, or turn on a firewall. Enabling the built-in Windows XP firewall will block this spam forever. Windows XP Service Pack 2 turns on the firewall by default.