Got this one too. Used Process Explorer, found 3 items without any manufacturers' name running in my Vista User account:

css.exe, ppxcs.exe, and sccs.exe.
Adds rafbsvnx toolbar to Firefox or MSIE, which gives bogus malware reads and links to more malware sites.

Multiple bogus sites found pushing Spyware Hunter, probably more malware.

System Restore failed. AVG 8 Freeware missed them after full scan.

Google led me to PC Tools Spyware Doctor, which failed entirely to get them. $39 for three computers, gave it a shot. Failed.

Found Previx CSI which was quick to spot them and did clean removal. You can get one month removal for $15. Worth it.