Found this one resurrecting the coeds mother's office workstation.
Once again, symptoms include pop ups without IE open, pop ups, and pop behinds that aren't corrected by mortal means. I have resolved to leave the damage there but limit system access to it.
Here's a link to the discussion that helped. Below is the post that makes it simple...
My problem was a 1 min login delay due the aktiveds.dll that loads at startup (thanks to NicTech Networks Inc.). The following advice worked for me so I guess it works for any .dll made by NicTech since they all use the same registry folder....
Open up regedit.exe and find THIS folder. Navigate to it by clicking the +'s to expand
things like you would in Windows explorer:
Right click over "Guardian" in the left pane.
Left click on "Permissions"
Left click "SYSTEM" once to highlight it.
Check "deny" in all boxes that you can at the bottom (Probably only 2)
Left click Apply
Left Click OK
Say "OK" to any warnings about permissions
**Reboot** the system
then problems solved