I had the ad back on the 23rd. It was the smiley face "you have won" ad.(only thing I had open and couldn't close IE quick enough). I just finally got rid of it today. It installed a nasty rootkit. GREM was the only thing that could get rid of it.(installed a random character .sys file in windows\system32\drivers that I couldn't delete the service nor the file with(killbox didn't work and it wouldn't allow me access in regedit). Had to disable the service with GREM, reboot and delete the file). AVG, HijackThis and several other programs couldn't detect it. It was sending spam emails out. I have to use IE7(work computer and the site we use doesn't work 100% in IE8). For those of you who think it might have happened, don't forget to run netstat to make sure it isn't spamming.
