That Major Geeks link has the best step-by-step instructions that I've seen on running HijackThis.
Not that I care (I run FreeBSD), but since this is a DNS poisoning issue shouldn't the host-spec in any HTML link be in ip.dot format?