Hello to GA Researchers. I am asking a question very similar to
Question ID: 376365.

Recently I found that whenever I open IE, my homepage is set to about:
blank, and there is no method by which to change the homepage away
from this site. Furthermore, although perhaps unrelated, when I
subsequently opened MS Word it said that it was "preparing to
install". (Something that never happened before.)
 
According to question ID 376365, I need Reglite.exe, microsoft
recovery console and hijackthis.exe to solve this problem. I have all
3, my problem is in reglite. I am supposed to find a .dll file.
However, when I go to the specified string locale, apparently the
"value" window is supposed to reveal the hidden file name. I cannot
locate this .dll file.
I also wanted to know if deleting this dll file (if I can find it) and
the other with hijackthis.exe is sufficient to eliminate this virus.

Help in this problem is much appreciated.

regards

Try this instead it deals with the last about blank variants www.adwareaway.com

Q. CWShredder isn't fixing my problem!
A. While it's been easy and even fun keeping CWShredder up to date,
the recent variants are a living hell. The people who wrote the latest
variants of the trojan surpass the older variants by far.
- Resident DLLs from the about:blank, res://xxxx.dll or invisible
variants cannot be removed by CWShredder or HijackThis.
- Variants like f0r0r that are protected by Hacker Defender cannot be
removed by CWShredder or HijackThis.

Q. When will CWShredder be updated again?
A. It won't be again, probably. I have a few bugs to fix, but after
that there's not much left to do - I simply do not have the tools to
remove the latest variants, they are too agressive or complicated to
allow automated removal by CWShredder.

Q

Go to this link:  http://www.safer-networking.org/en/download/index.html

Download Spybot.  Install it.  Run "search and destroy."  It will find
all the problems.  After the search is complete....select "fix
problems."  Voila!

Another good program is "winpatrol"

Either one will work.

I am a novice and had the same problem. The answer is a free program called
Adware Away. The virus monitors the homepage addy and if you attempt
to change it it will reinfect with the redirection. You must isolate
and kill the scanning process, and prepare to reboot and kill the
virus slowly, bit by bit.
Read the instructions carefully and dont be afraid to delete any
suspicious files, I ran the program about 5 times, rebooting after
each "kill" and eventually the virus will keel over and die.

Percevere, this is an easy fix, and Im no pro!

OK!
I am at jamesdukes50@hotmail.com if you need any more help,

Cheers,
James