You might wanna try this, squinney:
Disconnect from the 'net and boot into safemode. Go to Start > Run. The Run dialog will appear. Type "regedit" (without the quotes) and click OK. The registry editor will open.
Navigate to the key:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\
In the right pane, delete the value
{3D0BDAB3-12F4-471C-8966-E35A2C6C7DE7}, if it exists.
Exit the registry editor.
Restart your computer, again into safemode.
Go to Start > Search > All Files and Folders. Configure Search to look in ALL files and folders, including hidden and system files and folders. Search for, and if found, delete:
FWNToolbar.dll(
(If present, it should be found in your C:\Windows\System if you are running Windows 95/98/Me, in C:\WINNT\System32 if you are running Windows NT/2000, or C:\Windows\System32 if you are running Windows XP).
Then search for and delete if found any files named or containing
FWN* or
Findwhatever*. Be sure to include the asterisk to find any variations on those file names.
While still in safemode, empty all of your "Temp" folders, for all users, including all offline content from IE cache, and C:\Windows\Temp (just delete the contents, not the folders themselves). Then empty your recycle bin. Open IE (ignore any Not Connected" or "Cannot Display Page" warnings), go to Tools, and manually type in the entire (
http://www.whateveretc.whatever) url for your desired homepage, confirm your entry, and exit "Tools"
Reboot normally, connect to the 'net, and let us know what happened.
BTW, the current versions of both Spybot S&D and AdAware ought to be able to find that critter, though they may not be able to remove it. I believe Spybot, if properly configured, should prevent reinfestation, though.