Here is link I found online that shows you how to remove this beast:
http://www.securiteam.com/securityreviews/5RP0L0UD5U.html
People have said this worked for them, but this has NOT worked for me. I am unable to delete the reg key picked up by reglite, but I am able to remove the DLL file. (Read on to the button to see why this doesn’t work for me).
So here are the programs I TRIED to use to remove this malware!
-Ad aware 6.0 w. updates
-Spybot w. updates (doesn’t seem like they update anymore though)
-Latest version of cwshedder
-Hijack this
-Spy Sweeper with updates (takes a long time to scan but picks up more stuff than spybot/adaware)
-BHO Demon 2.0 (picks up the randomly generated .dll file
None of these programs have helped me remove this nasty spyware..
*all done in safe mode btw*
-so the spyware creates an sp.html in your local temp folder
-I delete all the temp folders, startup files and reg keys, etc.
-I delete the .dll that is picked up from the BHO Demon 2.0 BUT IT GETS CREATED AGAIN with another file name.
So there must be another hidden file (most likely a dll file) that is causing this problem.
If anybody has any insight on where to look or want to discuss this further, let me know.
Thanks
;(