Ok well this is new to me. I activily search for viruses, spyware and such to figure fixes for ones that are not documented yet. I just found one.

Not alot about it on google or yahoo, it looks old because Microsoft sued them. But from what I find from search engines, not alot comes up about it like other popular exploits. It re-installes itself after running HijackThis and only takes over the default search, home page, search, and all prefixes.

the exploit is "mycrasoft"

I will follow up on it here from what I find about it.

CyberSorcerer