Sounds like it might be a trojan of some kind. The link mentions using HijackThis, which we use at work. Just be careful, because we've found that program can be a little overzealous in finding "spyware" that's really legit.
http://www.computing.net/security/wwwboard/forum/11369.html
EDIT: another link
http://www.dslreports.com/forum/remark,10016752~mode=flat
Last edited by hetfield; 05/20/04 02:59 AM.