I just watched this malware do a man in the middle attack on one of my clients paying for a service using their credit card and cannot find any source to confirm it is in fact Sunspot so I can verify post removal process. No anti-viruses detect it! http://www.net-security.org/malware_news.php?id=1719 Any ideas?
I would look at the two registry keys mentioned in the article you posted, this is where it launches from.
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components.
Or better yet use a browser it does not "hook", like Chrome Browser