I've recently spent ages trying to get rid of a Hijacker from my system but nothing worked. Tried Spybot S&S, HijackThis, Bazooka Etc. They either didn't find anything or only gave hints as to wat it was. I finally used Spybot to show registery changes and went and looked what was there. It was a file called gahe.dll! I used "FIND" and it as in my regestry 20 times and also in my system32 folder. Its all gone now and everything is running fine. Any ideas what it was or how to protect it the future??

Does the line in HiJackThis read:
C:\WINDOWS\System32\gahe.dll/sp.html
Or something similar?

If so, this might be one of the new variants of CoolWebSearch. Post your HiJackThis log in the HiJackThis forum and an expert can help you rremove it.

Got rid of it now. I spent days getting rid of it! It came in with a Micromedia flash file. It got in twice that way. I used Spybot S&S to inform me of reg changes. Every time I launched the browser it threw up a reg change and 3 browser changes. So I wrote down the number of the reg change (i.e 4F675-5677G...etc) Then went in to regedit and searched for it. In it was a dll file. (first time infected was gahe.dll second time was bddb.dll or something) So I wrote that down and searched the entire reg for all files called that and deleted there containing folders. Then I went to windows/system32 (XP) and found the same file and delete that too. It caused an about:blank home page.

Good for you. I've heard the new variants are hard to get rid of.