I have been hijacked by FIND-ONLINE.NET and everything I tried has not worked. I have ran several different progs from virus scans, spyware, etc and even HIJACKTHIS and removed all references to F-O-N that I can spot but it keeps coming back. What is reinstalling this into my browser?? Below is the copy of my current scan. Any help is appreciated.
Logfile of HijackThis v1.99.0
Scan saved at 1:54:30 PM, on 1/5/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\system32\spoolsv.exe
I:\WINDOWS\Explorer.EXE
I:\WINDOWS\SYSTEM32\USRmlnkA.exe
I:\WINDOWS\System32\sstray.exe
I:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
I:\WINDOWS\SYSTEM32\USRshutA.exe
I:\PROGRA~1\CA\ETRUST~1\ETRUST~2\VetTray.exe
D:\The Cleaner\tca.exe
I:\WINDOWS\SYSTEM32\USRmlnkA.exe
D:\The Cleaner\tcm.exe
I:\PROGRA~1\CA\ETRUST~1\ETRUST~3\ca.exe
I:\WINDOWS\System32\winmgr.exe
I:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
I:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
I:\WINDOWS\System32\CTsvcCDA.exe
I:\WINDOWS\System32\inetsrv\inetinfo.exe
I:\WINDOWS\System32\nvsvc32.exe
I:\WINDOWS\System32\snmp.exe
I:\WINDOWS\system32\ZONELABS\vsmon.exe
I:\WINDOWS\System32\MsPMSPSv.exe
I:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
I:\WINDOWS\System32\svchost.exe
I:\Program Files\Internet Explorer\IEXPLORE.EXE
I:\Program Files\Messenger\msmsgs.exe
I:\Program Files\HI-JACK THIS\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.find-online.net/index.html
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - I:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [USRpdA] I:\WINDOWS\SYSTEM32\USRmlnkA.exe RunServices \Device\3cpipe-USRpdA
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CTStartup] "I:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE" /run
O4 - HKLM\..\Run: [NeroCheck] I:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "I:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [VetTray] I:\PROGRA~1\CA\ETRUST~1\ETRUST~2\VetTray.exe
O4 - HKLM\..\Run: [tcactive] D:\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] D:\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [Zone Labs Client] I:\PROGRA~1\CA\ETRUST~1\ETRUST~3\ca.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Weather] I:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [warez] "D:\Program Files\Warez P2P Client\warez.exe" -h
O4 - HKCU\..\Run: [winmgr] I:\WINDOWS\System32\winmgr.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: I:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {047CE197-F3B0-40EE-B4BD-D8B388AB5EFD} - file://C:\Recycled\546934.exe
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) -
http://wdownload.weatherbug.com/mini...ansporter.cab?
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) -
http://games-dl.real.com/gameconsole...rcadeRdxIE.cab
O16 - DPF: {D8A8A7F1-53EF-41F2-B44D-F3E2E595DC27} - ms-its:mhtml:file://C:\MAIN.MHT!
http://69.50.163.248/328//main.chm::/update.exe
O23 - Service: CA ISafe - Computer Associates International, Inc. - I:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - I:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Netropa NHK Server - Unknown - I:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - I:\WINDOWS\System32\nvsvc32.exe
O23 - Service: VET Message Service - Computer Associates International, Inc. - I:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - I:\WINDOWS\system32\ZONELABS\vsmon.exe
As you can see the F-O-N is back again, ARGGGGGH!!!!!!!!!