Any time you have something like this come up, just put the name into GOOGLE.. You will get any number of sites that are dedicated to getting rid of this trash..
http://computercops.biz/article-5199-nested-0-0.html
The above link contains the following instructions...
1) With Reglite.exe find name of hidden file:
Double Click on AppInit_DLLs located in HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows The value window reveals the hidden file name. (mine was hlpl.dll, yours may be different!) In this example lets call it hidden.dll
2) Rename the hidden file:
Close Windows and reboot using Windows Recovery Console Go to c:Windowssystem32 and do two things. Change file from read only by typing attrib r hidden.dll Then rename it (I dont know why, but this procedure did not work until I renamed it) type rename hidden.dll nasty.dll (and remember that hidden.dll is for this explanation only use the name you found earlier) Type exit and reboot to Windows.
3) Edit registry to remove hidden file
Run reglite.exe again. Double Click on AppInit_DLLs located in HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows Delete the file in value window, the size window changes also. Apply changes and exit reglite.exe
4) Edit registry to remove the second file
Run HiJackThis.exe and scan the registry. Check the boxes to remove the following entries:
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSSystem32jheckb.dll/sp.html (obfuscated)
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,HomeOldSP = about:blank (as you can see my second .dll was called jheckb.dll yours may be different) For this example lets call it obvious.dll.
Finally delete the two .dlls (hidden.dll and obvious.dll) You should be running again.
By the way, if you go offline with Internet Explorer and type OK To these nasty adware windows you will see the guys who benefit. From this hijacker. I found:
www.palsol.com
www.likesurfing.com
www.vn.msie.cc (the real web page)
They seem to be selling adware/spyware protection Pass the word, Boycott them, Who needs to be extorted for protection money?
I wouldn't suggest messing around in the registry file unless you know what you are doing. The slightest typo will possibly render your system unbootable.