From your headers: "Microsoft Outlook Express 6.00.2800.1409"
The above states that you have installed a Cumulative Security Update for OE
(MS04-013) that is newer than and therefore supersedes the update you
posted. Furthermore, that update (MS02-014,
http://www.microsoft.com/technet/security/bulletin/MS02-014.mspx) is a
Windows update, not an OE update. All in all, everything sounds quite
fishy.
1. Try overinstalling IE and OE6:
First, close *everything* via CTRL+ALT+DEL except Windows Explorer (includes
your AV program, Scheduled Tasks, Screensaver, and going offline).
Start>Run>IE6Setup.exe. Select Minimal - Custom; Select all the parts you
use, including OE (but none you didn't originally download) and overinstall.
Should take about 2 minutes. Reboot the computer.
Now, with AV and all other running processes still closed, check in at
Windows Update for additional updates and patches you will need.
2. If still no joy, we must assume a hijacking.
Dealing with Trojans & Hijackware
A. Removing Trojans and Trojanware with Sysclean
Create a new folder named Sysclean (e.g., C:\Program files\Sysclean or just
a desktop folder). Download 'Sysclean.com' from
http://www.trendmicro.com/download/dcs.asp to this folder. Download the
latest 'Trend Pattern File' zip (e.g., lpt123.zip) from
http://www.trendmicro.com/download/pattern.asp and extract its contents to
the same folder; see the Readme text file for instructions.
Delete Temporary Internet Files (IE Tools>Internet Options>General)
accepting the option to delete all offline content. Reboot and delete
contents of TEMP folders and Recycle Bin.
Close all running programs including your anti-virus application, go
offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.
When finished, update your own anti-virus application and run a full system
scan with it, too.
B. Hijackware
Help with Hijackware (all are MS MVP sites)
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
Run the following tools in this order with nothing else running in
background:
1. CWShredder v2.0 (no updates available currently; choose Fix, not Scan)
2. Ad-Aware SE (Reconfigure per
http://aumha.org/forum/viewtopic.php?t=5877;
Fix all found)
3. Spybot (RTFM; Immunize first and then scan; Generally, fix everything in
red)
Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7.
When all else fails, HijackThis
(
http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to
http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**
[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]
So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957