browser attacks solution please

hi, second post on the same question. First one was answered and solved within 2 hours, hoping for the same success here.
My friend’s browser has been attacked.
His default home page was hijacked, this has been solved with ie-spyad software patch, and ‘enough’ was installed over the top of that.
cwshredder was also added for good measure.
His Internet options security has been tweaked.
Beforehand, I ran the 30 day version of Spy Sweeper which detected and removed some spyware.
The problem remaining is persistant within the excisting system and seems to be two-fold:
1. persistant icons have been placed on the desktop
2. distasteful sites have been added to the favourites menu of IE.
Any takers?