That alert means you Norton Firewall is working correctly. The IP in the intrusion is Earthlink. Is Earthlink your ISP?

Yeah, one more time, go into Safe Mode for the scans. Update both your anti-virus program, the AVG cleaner before booting to Safe Mode. Also, disconnect completely from the internet too. I mean, actually remove the cable from the computer.

Be sure to run the ATF-Cleaner before doing any scans. Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK > EXIT

Next
run you anti-virus cleaner. Run a full system scan and have it fix or quarantine anything found.
Next run the AVG anti-spy program
Launch AVG Anti-Spyware.
-- Click on the Scanner button and choose the Settings Tab.
---> Under How to act?, click on Recommended action and choose Quarantine to set default action for detected malware.
--->Under Reports make sure Automatically generate report after every scan is selected and UNCHECK the Only if threats were found box.
-- Leave everything else at their default settings and Select the Scan tab and CLICK Complete System Scan to scan your machine.
-- Upon completion of the scan, Click Apply all actions to place any detected baddies in Quarantine.
-- AFTER clicking Apply all actions, Click on Save Report and select Save the report to your Desktop.

Once you have completed the scans then shut down the computer. Reconnect the internet cable. Reboot to normal mode and make sure all unnecessary programs are closed including browsers or IM programs;

Go into the taskmanager by hitting Ctrl-Alt-Delete
and see if these processes are running, if they are end them;
qttask.exe
SweetIM.exe
iTunesHelper.exe
iPodService.exe
None of these are necessary to the running of the computer so they can be turned off.
Once they are turned off then run the new HJT scan. Save the log and post it here along with that new AVG log.
Judy