[photon]

I kind of doubt it's the ads either unless something's changed with the ad company, ads are one thing but ads that install spyware are another. Is there a common ad it appears on?

I can't recall how installing the activex stuff works, I think you can start the install and it'll identify where it's coming from and more info about it and then decline it, that info would be useful (though I'm not positive that's how it works, so if you don't want to risk it I understand).

The other things on the page are google analytics and I doubt it's that, the weather thing which is flash, and the only other thing is the frappr icon.

I wish I could recreate it here so I could figure out what's causing it at least.