I should point out that the registry settings for app_init_dlls is currently set to a dll that doesn't exist as I had managed to get rid of it previously. So I think the problem lies elsewhere.

This needs to be put in the Security section and you can also post your hjt log there. I would move it for you, but I don't know how yet.

It's ok thanks I think I've fixed it. The problem with this is that there are a lot of advice and fixes and they are pretty much all incorrect. You should follow the registry fixes etc but there is still one final step:

Users will need to search for the latest dll in windows/system32 (i.e. list by date), rename it. Reboot into safe mode and delete it.

Moved to Security.

Hey all you senior techies out there, is this a good fix?

Not being funny but a lot of the solutions offered to this fix are a) incorrect or b) correct to some degree or c) badly written in the extreme.

One thing is for sure, cwshredder, about:buster, hijackthis, reglite.exe, ad aware - none of these will fix this problem for sure. You need to run my dll check as listed above or it will keep coming back. I hope this helps I can't believe that there isn't an automated solution to this yet another glaring security problem.

ok after my previous posturing this thing appears to back. Similarly to other people it has come back about two days later. I think it's to do with other users logging onto my pc, somehow this propogates again. Can anyone help?

All I can say is this:

The system I'm using now was infested with this about|blank rubbish, it is'nt now!

Just after it got hit with the about|blank thingy, it also got hit with a netsky variant virus. Here's the combination of tools I used on it, all in 'Safe mode'.

Stinger
AdAware
Spybot Search & Destroy
CWShredder
Trojan Remover

It took several reboots before full functionality of the system was restored, as several OS functions 'dissappeared for a little while (System Properties, Add/Remove programs and a few others. They came back after a few reboots)


Having got the system back to clean, working order, I've installed a better AntiVirus package and paid more attention to keeping it updated, as failure to install an update is the reason it copped the virus infection. I've also switched to using Mozilla as my default browser, and use Internet Explorer only when absolutely necessary.

I'm sorry catweasle but I simply don't believe you and I reckon you are trying to hawk adaware. Why on earth would it require several reboots? Either it's fixed or not. Similarly why would system properties disappear and come back?