I once had a nasty that Panda Online Scan picked up, Panda didn't remove it, only reported it to me.
For the life of me I couldn't find it, I even emailed Panda but received no reply.
Eventually I was able to find it by using a dos prompt and removing all the file attributes via dos from the files that were supposed to be in the directory.
I have no idea why it allowed me to see stuff that windows would not show?
I even found some leftover norton virus files in there too..... a bonus!

Anyway, try using the dos attrib -R -A -S -H command on the file & directory followed by the dir & del commands.

If you are shaky with dos as I am and you need some help, just ASK as there are a few people in here who could easily lead you through it.What should I do about this hijacker? UnknownUser..... What is the current status of your machine ....... The last hijack log I saw was taken on May1 ...thats 3 days ago ........

How about a new one .....

dl65  Further up this thread you put a LINK to [highlight]'a screen'[/highlight], you need to double click on the [highlight]'My Documents'[/highlight] folder to see what's in there because that's where this [highlight]\??sks\c?rss.exe[/highlight] directory & file are supposed to be.

If you see them, delete them along with the startup entry using Hijackthis.
O4 - HKCU\..\Run: [Zwhzglwr] C:\Documents and Settings\Compaq_Administrator\My Documents\??sks\c?rss.exe  

If you can't see them, tell us & I will guide you through the previously mentioned DOS process unless someone else volunteers,..... c'mon guys.

As DL65 said, give us a fresh Hijackthis log too.When I ran Hijackthis I deleted everything it found. The site no longer comes up as my homepage. Heres a log just incase you guys still need it.

 UnknownUser....  Ok , your logfile looks fine now ...... WELL DONE .
If you had your system RESTORE turned off , you can SAFELY turn it back on now ,

dl65  Cool, thanks for all the help guys. How did you manage to delete c?rss.exe?
Hijackthis won't delete it for you, it will only delete the startup entry.