Netspry?

[BIB]

Ok a friend of mine woke up this morning to this site (click on your own risk) www.netspry.com as his homepage. When i tried to change the homepage back to yahoo or something, it would change. But when he opened a new window it would go back to the netspry homepage. He tried virus scan, spybot and deleted all the stuff it found and searched the name on his computer. Got nothing and it is still doing it.
any clues on what this is and how to get rid of it?

[deeman]

try cwshredder and hijack this heres a link
http://www.spywareinfo.com/~merijn/downloads.html
they are near the bottom of the page

[BIB]

heres the report
what does it mean, he just did a scan, should he do the fix option.
CWShredder v1.49.0 scan only report

Windows XP (5.01.2600 SP1)
Windows dir: C:\WINDOWS
Windows system dir: C:\WINDOWS\system32
AppData folder: C:\Documents and Settings\Mark\Application Data
Username: Mark

Found Hosts file: C:\WINDOWS\system32\drivers\etc\hosts (850 bytes, R)
Shell Registry value: HKLM\..\WinLogon [Shell] Explorer.exe
UserInit Registry value: HKLM\..\WinLogon [UserInit] C:\WINDOWS\system32\userinit.exe,
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic] http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (809 bytes, A)
Found System.ini file: C:\WINDOWS\system.ini (256 bytes, A)

[BIB]

i just tried to uninstall IE and reinstall and still it has that set to the homepage.