Browser hijacked to heretofind.com

I followed the directions in the sticky post but am still getting these lines in my Hijack This logs and when I check the boxes for them and "fix" them, they come right back:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.heretofind.com/show.php?id=0&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mkMSITStore:C:\spe\start.chm::/start.html#


O13 - DefaultPrefix: http://www.heretofind.com/show.php?id=0&q=
O13 - WWW Prefix: http://www.heretofind.com/show.php?id=0&q=
O13 - Home Prefix: http://www.heretofind.com/show.php?id=0&q=
O13 - Mosaic Prefix: http://www.heretofind.com/show.php?id=0&q=
O13 - Gopher Prefix: http://www.heretofind.com/show.php?id=0&q=

I'm not sure what to delete; may I post my whole Hijack This log?

Also, incidentally, Service Pack 2 for Windows XP is repeatedly failing to install for me via Windows Update so I wasn't able to do that step. No idea why that's not working.

 

Fixed it I guess; I ran Panda Virus Scan and it looks like it was a virus in C:\spe, a folder I thought looked new and suspicious but since it's my dad's computer I wasn't sure at first.