I found this on a client's PC. We tried hijack this and other programs to remove it. It set his home page to "home search". Each time it's removed from the registry run key, cleaned by hijack this, and any files in the c:\windows folder renamed, it re-spawned with new random file names. I finally gave up, captured some of the files and sent to Trend antivirus (our vendor) for analysis. Maybe they can create a pattern file that detects and cleans it.