You are correct in that the service pack would have likely set it to the default. It also sounds as if your browser has been hijacked since the install and you will need the usual malware routines to get it back to where you can protect yourself. Look at other posts throughout, especially those posted by Robert P. (M) regarding all the tools he suggests. For sure get freeware spybot and ad-aware and run them.