Try showing all hidden files/folders. Go to My Computer and pull down the menu tools and hit folder options. Click on the tab view. Click on show hidden files and folders and uncheck hide extensions for known filetypes. Try running hijack this again and see if there is a problem.
I used to have the about:blank problem. It may have been a different variant than others because mine came with a .dll file in the Winsock LSP which kept re-creating the hijack after I deleted it.
If you manually delete the file in Windows Winsock LSP, then you will be left with a broken connection to the internet. Someone may have tried that, and if so you may need to find a backup or do a system restore to a point before the hijack appeared.
Try running LSP fix and see if there is a file on remove. If not, try finding all the files on the KEEP section and right click on them. Check their company name. The one without the company name will be the culprit.
I can't be sure, but this may have been caused if someone clicked on the pop-ups of the hijack. If it started as soon as the hijack appeared, then you may have a new CWS variant.
If the above information didn't help then try this. Download Task Info (Click Here)
Run the program and open an internet explorer window. On the left pane, where the processes are, click on the internet explorer icon. On the bottom right pane, click modules. This will show all the .dll files that the internet is using. Sort them by company name. If there are .dll files that don't have a company name, then they are part of the hijack. Try rebooting into safe mode and deleting those files. (always make backup copies and move them into a different folder)
If that didn't help, then try this. Download About:Buster
and download Remove-ABlank
run them in safe mode. The remove-ablank will flash the command prompt and it will go off. That is what is supposed to happen. Reboot into normal mode. Make your homepage back to normal. Open your registry (type regedit in run) and go to HKEY_LOCAL_MACHING > SOFTWARE > Microsoft > Windows NT > Current Version > Windows and look at AppInit_dlls and see if there is a path there to your system32 folder. If so, close all programs except your registry. Double click on the AppInit_DLLs and make write over the filepath with jiberish. Hit ok and don't close your registry. Reboot your computer. See if that deleted the file path. If not, try it again. (It took me two tries).
Again, this may be a new variant of a CWS. This one sounds like it is pretty stealthy too. I am going to be away for 6 days and this will probobly be my final post for you. I will check here when I get back though. I hope this helps and I wish you luck with this thing.