Took me several tries before I finally was able to delete it in its entirety
. It is over 50 keys strong. The potential damage of the trojan is about Med
ium. Mainly annoyance and it disrupts Internet Explorer by adding space keys
. Adding extra weight to IE and Sbrowser.
The most intelligent thing about this trojan is it replicates itself every m
initue iexplore.exe is running!
HOW AMAZING IS THAT?
Here is how the Trojan works.
It opens your iexplorer with about :blank hp
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Start Page = "about :blank" 

It keeps it there and make sures it stays there with this key
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Search Page = "%Temp%\sp.html" 

Hides in here
HKEY_LOCAL_MACHINE\Software\Microsoft\
Internet Explorer\Main
Start Page = "about :blank" 

Hides in here
HKEY_LOCAL_MACHINE\Software\Microsoft\
Internet Explorer\Main
Search Page = "%Temp%\sp.html" 

Hides in here
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main Search Bar = "%Temp%\sp.html" 

Hides in here
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Search
SearchAssistant = "%Temp%\sp.html" 

Makes this process work
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
HOMEOldSP = "about :blank" 

What a genuis trojan.
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Use Search Asst = "no" 

Ok. now this is an annoying code.
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Use Custom Search URL = dword:00000001 

this code makes it so much more diffucult to delete it.
HKEY_LOCAL_MACHINE\Software\Microsoft\
Internet Explorer\Search
SearchAssistant = "%Temp%\sp.html" 


And its functions
HKEY_CLASSES_ROOT\Protocols\Filter\text/html
CLSID = "{D0D8AD92-08F9-4996-962E-B580952B2567}" 
HKEY_CLASSES_ROOT\Protocols\Filter\text/plain
CLSID = "{D0D8AD92-08F9-4996-962E-B580952B2567}" 
HKEY_LOCAL_MACHINE\Software\Classes\
Protocols\Filter\text/html
CLSID = "{D0D8AD92-08F9-4996-962E-B580952B2567}" 
HKEY_LOCAL_MACHINE\Software\Classes\
Protocols\Filter\text/plain
CLSID = "{D0D8AD92-08F9-4996-962E-B580952B2567}" 



Here is how to delete it.

Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter. 
In the left panel, double-click the following:
HKEY_CLASSES_ROOT>Protocols>Filter>text/html 
In the right panel, locate and delete the entry:
CLSID 
In the left panel, double-click the following:
HKEY_CLASSES_ROOT>Protocols>Filter>text/plain 
In the right panel, locate and delete the entry:
CLSID 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Classes>
Protocols>Filter>text/html 
In the right panel, locate and delete the entry:
CLSID 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Classes>
Protocols>Filter>text/plain 
In the right panel, locate and delete the entry:
CLSID 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Internet Explorer>Search 
In the right panel, locate and delete the following entries:
SearchAssistant
Search Page
Search Bar 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Internet Explorer>Main 
In the right panel, locate and delete the following entries:
HOMEOldSP
Use Search Asst
Use Custom Search URL 
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>Search 
In the right panel, locate and delete the following entries:
SearchAssistant
Search Page
Search Bar 
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>Main 
In the right panel, locate and delete the following entries:
HOMEOldSP
Use Search Asst
Use Custom Search URL 
Search CLSID, there should be approximately 30 of them, DELETE all 30. 
Search HomeOld, change about :blank to www.msn.com(or anything you want)
then go Start, SEARCH, type sp.html and Delete it.
Restart your computer. If you fail to succeed to fix it once, don't give up,
 try again.

And if you know the website which gave you the trojan, please reply back wit
h the URL.