My friend's PC is running Windows 2000. The system was infected, slow, and pop-ups occured without running any apps.

I used the latest versions of BHOdemon, NOD32, Adaware, Spyware Doctor, Ewido, Pest Patrol and SpybotSD to remove a bunch of baddies from her PC but one apparent problem lingers: Internet Explorer automaticaly starts upon bootup and the url, http://iesettingsupdate/, is in the address field with a "page not found" error.

Here's the HiJackThis listing. I'm at a loss. Please advise.

(To avoid misunderstandings, please note the following valid but perhaps obscure apps that appear in the report below: BXNewFolder adds a "New Folder" icon to Windows Explorer. KatMouse adds scroll-wheel capability to any window the cursor is in - recommended! NOD32 is excellent AV software that was not installed when the system became infected. And Puretext is a tray app that can convert clipboard contents to plain text.)

Logfile of HijackThis v1.99.1
Scan saved at 10:00:35 AM, on 9/26/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\igfxtray.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Classic PhoneTools\CapFax.EXE
C:\Documents and Settings\AB\My Documents\New Folder\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Eset\nod32kui.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PureText.exe
C:\Program Files\KatMouse\KatMouse.exe
C:\PROGRA~1\BXNEWF~1\bxExpHelper.exe
C:\download\HijackThis.exe

O2 - BHO: bxNewFolder - {51C8BCA8-2524-4523-BF09-738C4EEBFC58} - C:\PROGRA~1\BXNEWF~1\BXNEWF~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [Tweak UI] "RUNDLL32.EXE" TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Synchronization Manager] "mobsync.exe" /logon
O4 - HKLM\..\Run: [CapFax] "C:\Program Files\Classic PhoneTools\CapFax.EXE"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Documents and Settings\AB\My Documents\New Folder\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - Startup: KatMouse.lnk = C:\Program Files\KatMouse\KatMouse.exe
O4 - Global Startup: PureText.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1159157147395
O20 - Winlogon Notify: wnmicf - wnmicf.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: P1ug and P1ay (P1ugP1ay) - Unknown owner - C:\WINNT\system\services.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Remote (RpcRemote) - Unknown owner - C:\WINNT\system32\remote.exe (file missing)