I have had a few popup ads that are there after I close Internet Explorer, and they are in an IE window with the title "[...]" I also show a showbehind in the startup when I run MSCONFIG and click on startup tab. It says it is loaded from registry and WINDOWS/... Login to read more.