I have the same problem. I got infected by just browsing webpages, even with zonealarm, atest XP updates and latest NAV running. Have tried latest ad-aware and spy sweeper. As soon as they remove the keys to fix the hijack, some process immediatly changes them back. I get the popup each time I open a browser also. This is so anoying that I am considering rebuilding my machine from scratch which will take about 2 days. I cant believe you cannot protect your self from such malicious kak.

not ver happybunny.

I have same problem. Tried adaware, spybot, and hijackthis deleting anything obvious, but it keeps coming back. Tried deleting anything suspicious running as tsr first then running above, still no fix.
This one has me stumped so far and is really annoying. Has hijack to "search for ..." and a popup each time. Most memorable is the green caterpillars performing various sex acts.
I don't have any google toolbar stuff.

Anybody know what O2 BHO .......... C:WINDOWS\SYSTEM32\ojeg.dll is?

I can't pull up any info on what the heck ojeg.dll is. I'm thinking it might be the culprit but am a little scared to delete without knowing exactly what it is first.

ok, I ran panda av and it seems to have fixed the problem... and sure enough, for me it was the "ojeg.dll" that was causing the problem.
I'll bet it uses random or many names, but I'll bet the reason this problem keeps coming back is due to the xxxxxxx.dll file you'll see but won't recognize as anything located in your hijack this post.
It will be O2 BHO ... C:\WINDOWS\SYSTEM32\XXXX.dll

well... it's back
damn still can't get rid of this for good.
I know somone else who has it too.

Panda definitely helps, maybe would permanently fix if i bought it.
What is the real fix for this?
Anyone???

Please post another HJT log after a reboot & I will have another look soon.