I hit this problem not so long ago and a friend hit it today and asked for help. Both of us had downloaded something from CNET and it came with an unwanted change of default search in all main browsers (todays was called mysearchdial). Didn't see any tick box to say "no thanks". In both cases removal wasn't easy. A way of spotting sneaky installs like this would be great.