I know this is a common thing for some spyware to do but I have run endless checks with:
Superantispyware (updated from a manual download on another pc)
spybot (which uniquely, does update ok).
I can't find anymore infections and have also checked the HOSTS file for any entries. There doesn't seem to be any of these sites added in the Restriced sites area of IE. Firefox is also installed and is also blocked from the same sites...
I have run all these utilities in every user account.
I have also used LSPFIX and found nothing odd and reset the network settings with WinsockFix.
This is a machine running XP Home with SP2.
Any idea's where I can start looking for an answer?
The latest HijackThis file is attached...